hata alman gayet normal zaten hatanin ne oldugunuda soyluyor. pf'de rulelar belli bir duzen icinde olmali "Rules must be in order: options, normalization, queueing, translation, filtering" . Asagidaki sekilde anchor rulelarini duzenlersen sorun olmayacaktir.
ext_if="le0" ext_ip="{10.0.0.19 , 10.0.0.20 }" *anchor "ftp-proxy/*" * *nat-anchor "ftp-proxy/*" rdr-anchor "ftp-proxy/*" rdr on $ext_if proto tcp from any to any port 21 -> **127.0.0.1*<http://127.0.0.1/> * \ port 8021* pass quick on lo0 keep state pass in quick on $ext_if inet proto tcp from any to $ext_ip port {22, 80, 21} keep state flags S/SA pass in quick on $ext_if inet proto tcp from any to $ext_ip port = 53 keep state flags S/SA pass in quick on $ext_if inet proto udp from any to $ext_ip port = 53 keep state 2008/4/7 Sinan <[EMAIL PROTECTED]>: > > > > > Ekledim anchor "ftp-proxy/*" yi ama hocam sorun aynı yine > saygılar... > > > > ******************* > > ext_if="le0" > ext_ip="{10.0.0.19 , 10.0.0.20 }" > > > > scrub in all > pass quick on lo0 keep state > pass in quick on $ext_if inet proto tcp from any to $ext_ip port {22, 80, > 21} keep state flags S/SA > pass in quick on $ext_if inet proto tcp from any to $ext_ip port = 53 keep > state flags S/SA > pass in quick on $ext_if inet proto udp from any to $ext_ip port = 53 keep > state > > > pass out log on $ext_if inet proto tcp from ($ext_if) port > 1023 \ to any > port ftp modulate state > pass out log on $ext_if inet proto tcp from ($ext_if) port > 1023 \ to any > port > 1023 modulate state > pass in log on $ext_if inet proto tcp from ($ext_if) port > 1023 \ to any > port > 1023 modulate state > > anchor "ftp-proxy/*" > nat-anchor "ftp-proxy/*" > rdr-anchor "ftp-proxy/*" > rdr on $ext_if proto tcp from any to any port 21 -> 127.0.0.1 \ port 8021 > > > pass in on $ext_if proto tcp from any to any port 21 keep state > pass in on $ext_if proto tcp from any to any port > 49151 \ keep state > > pass out quick on $ext_if inet proto tcp all modulate state flags S/SA > pass out quick on $ext_if inet proto { udp, icmp } all keep state > block in quick all > block out quick all > > **************************************************** > > [EMAIL PROTECTED] ~]# pfctl -f /etc/pf.conf > /etc/pf.conf:18: Rules must be in order: options, normalization, queueing, > translation, filtering > /etc/pf.conf:19: Rules must be in order: options, normalization, queueing, > translation, filtering > /etc/pf.conf:20: Rules must be in order: options, normalization, queueing, > translation, filtering > pfctl: Syntax error in config file: pf rules not loaded > [EMAIL PROTECTED] ~]# > > > >