On 10 March 2010 c. 12:09:07 tsg12...@gmx.de wrote: > Apologies first. > > My first thought after waking up today was "I mixed IPs and IFs". > Sorry for posting that... > > Remaining question second. > > The filtering does not seem to get "populated" by > ftp-proxy. > > A rule like: > pass in on $client_if proto { tcp udp } from $client \ > to 127.0.0.1 port ftp > > does not do the trick, I still have to use something like: > pass in on $client_if proto { tcp udp } from $client \ > to 127.0.0.1
You forgot that rdr rule mangles destination, _including_ port: pass in on $client_if proto { tcp udp } from $client \ to 127.0.0.1 port 8021 Or just add "pass" after "rdr" in the rdr rule. -- Best wishes, Vadim Zhukov A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing in e-mail?