Re: Can't get FTP through pf

2013-04-04 Thread John Tate
Thanks! On Thu, Apr 4, 2013 at 4:29 PM, David Diggles wrote: > Looks like these are your conflicting rules. > > > pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021 > > pass in on $ext_if proto tcp to port 21 > > The first rule needs to be on $int_if - you didn't specify an

Re: Can't get FTP through pf

2013-04-03 Thread David Diggles
Looks like these are your conflicting rules. > pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021 > pass in on $ext_if proto tcp to port 21 The first rule needs to be on $int_if - you didn't specify an interface so it then defaults to all interfaces.

Re: Can't get FTP through pf

2013-04-03 Thread David Diggles
Your pf.conf differs from examples in the faq. I would suggest turn logging on in pf, and do: tcpdump -n -e -ttt -i pflog0 Then you can see why it's failing. On Thu, Apr 04, 2013 at 09:38:57AM +1100, John Tate wrote: > I've got a gateway computer I also I want to be an ftp server. I've put > eve

Can't get FTP through pf

2013-04-03 Thread John Tate
I've got a gateway computer I also I want to be an ftp server. I've put everything through pf as per http://openbsd.org/faq/pf/ftp.html Can anyone see something I've missed in this config? I can't access it remotely. # grep -v -e ^# -e ^$ /etc/vsftpd.conf anonymous_enable=NO local_enable=YES dirm