Module Name: src
Committed By: sevan
Date: Sun Sep 22 19:30:16 UTC 2019
Modified Files:
src/share/examples/npf: soho_gw-npf.conf
Log Message:
Passive FTP works as a client without this and we're not hosting an FTP server
(port are not listed in services_tcp)
To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 src/share/examples/npf/soho_gw-npf.conf
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/share/examples/npf/soho_gw-npf.conf
diff -u src/share/examples/npf/soho_gw-npf.conf:1.17 src/share/examples/npf/soho_gw-npf.conf:1.18
--- src/share/examples/npf/soho_gw-npf.conf:1.17 Sat Sep 21 23:55:01 2019
+++ src/share/examples/npf/soho_gw-npf.conf Sun Sep 22 19:30:15 2019
@@ -1,4 +1,4 @@
-# $NetBSD: soho_gw-npf.conf,v 1.17 2019/09/21 23:55:01 sevan Exp $
+# $NetBSD: soho_gw-npf.conf,v 1.18 2019/09/22 19:30:15 sevan Exp $
#
# SOHO border
#
@@ -52,9 +52,6 @@ group "external" on $ext_if {
# Allow inbound traffic for services hosted on UDP
pass stateful in proto udp to $ext_addrs port $services_udp
- # Passive FTP
- pass stateful in proto tcp to $ext_addrs port 49151-65535
-
# Allow being tracerouted
pass stateful in proto udp to $ext_addrs port 33434-33600
}
