cell
February 15th, 2004, 06:40
hello, i have a problem with my ftp server . He is protected by an External PF Firewall Running NAT and i put this rules in my pf.conf but i have no result :/
ext = "tun0"
int = "vr0"
freebsd4 = "192.168.1.2"
ks = keep state

rdr on $ext proto tcp from any to $ext port 21 -> $freebsd4 port 21
rdr on $ext proto tcp from any to $ext port 39999:41001 -> $freebsd4 port 39999:41001

pass in on $ext proto tcp from any to $freebsd4 port 21 $ks
pass in on $ext proto tcp from any to $freebsd4 port 39999 >< 41001 $ks

pass out quick on $int proto tcp from any to $freebsd4 port 21 $ks
pass out quick on $int proto tcp from any to $freebsd4 port 39999 >< 41001 $ks


Someone have an idea for that ?

blackmilk
February 15th, 2004, 11:14
Umm you could try:

From:
[code:1:b1ab71253d]ks = keep state [/code:1:b1ab71253d]
To:
[code:1:b1ab71253d]ks ="keep state"[/code:1:b1ab71253d]