Am Dienstag, den 28.03.2006, 14:09 +0200 schrieb Michael Schmidt: Hi,
> So what I want to setup is pf and the ftp-daemon in that way that the > ftp-daemon offers only a very small range of passive ports (or perhaps > only one single passive port?) and that pf opens only the same small > range of ports (or the same single port). Well, I needed the exact same thing and did it with pure-ftpd[1] via the command-line option "-p 50000:50400" and an pf.conf entry like "pass in on $if tcp from any to $if port 50000:50400". Maybe this is an option for you too. CU David -- David Elze Tel: (+49)(0)441 - 36116410 [EMAIL PROTECTED] Fax: (+49)(0)441 - 36116419 http://www.bytemine.net/ PGP/GPG: 5F83FEA2 bytemine - Entwicklungsmanufaktur fuer innovative Loesungen [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]