On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote: > I'm in the process of rewriting a ipf firewall to a pf firewall script > > I have a macro defined like: > tcp_services = "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891, > 49151:50251 }
The manual page for pf.conf places the braces between double quotes in macro definitions: foo = "{" 21, 22, 49151:50251 "}" > I use it in a rule like: > pass in on $ext_if inet proto tcp from any to $ext_if \ > port $tcp_services flags S/SA keep state > > My question is about the 49151:50251 port range. It's used by my > PureFTP server. Is this a correct way of using the range. It should be according to the manual page. At least, that's how I read the PARAMETERS section of pf.conf(5). Roland -- R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text. public key: http://www.xs4all.nl/~rsmith/pubkey.txt
pgpjTkYn5V6kh.pgp
Description: PGP signature