On Tue, 28 Nov 2006, Ryan Corder wrote: > While the PF User Guide is truly an excellent document, it seems to > assume that you allow all outound traffic, so it only instructs you to > add a couple of anchors and a redirect rule. Do I need an additional > outbound 'pass' rule for FTP high ports, or does ftp-proxy handle all of > that via the anchors?
ftp-proxy handles all the data connections (passive and active) via the anchors. You don't need to add extra rules. That _should_ become clear from the manpage... if not improvements are always welcome. :-) -- Cam