pf rdr rule question - corrected

[Damien Fleuriot]

On 10/31/11 12:04 AM, Gót András wrote:
> Dear All,
> 
> I'd like to have the following ruleset, for pure-ftpd passive port range:
> 
> (pasv and past mistyping corrected)
> 
> ---
> ftp_pasv_start="X"
> ftp_pasv_end="Y"
> 
> rdr on $netif inet proto tcp from any to $internalip port
> $ftp_pasv_start:$ftp_pasv_end -> $internalip
> 
> pass in quick on $netif proto tcp from any to $internalip port
> $ftp_pasv_start >< $ftp_pasv_end keep state flags S/SA
> 

pass in quick on $netif proto tcp from any to $internalip port
$ftp_pasv_start:$ftp_pasv_end


Both keep state and flags S/SA are default, you don't need to write them.