Hello!

Somehow my passive mode isn't working.

# cat /etc/inetd.conf

ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l

ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy

auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf
auth stream tcp6 nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf

ircd stream tcp nowait nobody /usr/local/sbin/bitlbee bitlbee

# cat /etc/pf.conf

int_if="ep0"
ext_if="rl0"

set block-policy drop

scrub in all

nat  on $ext_if from $int_if:network to any -> ($ext_if)

rdr on $int_if proto tcp from any to any \
port 21 -> 127.0.0.1 port 8021

rdr on $ext_if proto tcp from any to any \
port 50000 -> 192.168.187.2 port 50000

block drop log all

pass quick on { lo0 $int_if }

pass out on $ext_if inet proto { tcp, udp, icmp } \
from any to any keep state

pass in on $ext_if proto icmp \
from any to any

pass in on $ext_if inet proto { tcp, udp } \
from any to ($ext_if) port 53

pass out on $ext_if inet proto { tcp, udp } \
from any port 53 to any

pass out on $ext_if inet proto udp \
from any to any port 123 keep state

pass in on $ext_if inet proto tcp \
from any to ($ext_if) port { 21, 22, 25, 80, 110, 113, 143 } \
flags S/SA keep state

pass in on $ext_if inet proto tcp \
from any port 20 to ($ext_if) user proxy flags S/SA keep state

pass in on $ext_if proto tcp \
from any to any port 31337 keep state

pass in on $ext_if proto tcp \
from any to any port 50000 keep state

pass in on $ext_if proto tcp \
from any to any port 53333:55555 keep state

I hope somebody can tell what's wrong.

All the peace,
Vaaf


_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to