pf rdr rule question - corrected

[Gót András]

On Mon, 31 Oct 2011 10:07:04 +0100, Damien Fleuriot wrote:
> On 10/31/11 12:04 AM, Gót András wrote:
>> Dear All,
>>
>> I'd like to have the following ruleset, for pure-ftpd passive port 
>> range:
>>
>> (pasv and past mistyping corrected)
>>
>> ---
>> ftp_pasv_start="X"
>> ftp_pasv_end="Y"
>>
>> rdr on $netif inet proto tcp from any to $internalip port
>> $ftp_pasv_start:$ftp_pasv_end -> $internalip
>>
>> pass in quick on $netif proto tcp from any to $internalip port
>> $ftp_pasv_start >< $ftp_pasv_end keep state flags S/SA
>>
>
> pass in quick on $netif proto tcp from any to $internalip port
> $ftp_pasv_start:$ftp_pasv_end
>
>
> Both keep state and flags S/SA are default, you don't need to write 
> them.

My problem is with the rdr rule, that the second macro won't get 
evaluated correctly. I just copied the stateful match rule, to make it 
more clear that with a pair of macros it's easier to set up.

FreeBSD version is 8.2.

Regards,
Andras