Re: Issues with FTP and PF

2008-11-18 Thread Юрий Дмитришин
This works. Thanks. > Try this: > > replace this line: > pass in on $vpn_if inet proto tcp to $ext_addr port 21 \ > flags S/SA keep state > with this: > pass in on $vpn_if inet proto tcp to $Srv port 21 \ > flags S/SA keep state > > Remember rdr's happen before filtering, so when pf see's

Re: Issues with FTP and PF

2008-11-17 Thread James Records
Try this: replace this line: pass in on $vpn_if inet proto tcp to $ext_addr port 21 \ flags S/SA keep state with this: pass in on $vpn_if inet proto tcp to $Srv port 21 \ flags S/SA keep state Remember rdr's happen before filtering, so when pf see's this packet it will have already been t

Re: Issues with FTP and PF

2008-11-17 Thread Dan
Yuriy A. Dmitrishin([EMAIL PROTECTED])@2008.11.17 12:47:51 +0200: > Hi. > > I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All > ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. > 78.78.78.78) are refused. > I think you are missing pass out tcp

Issues with FTP and PF

2008-11-17 Thread Yuriy A. Dmitrishin
Hi. I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. 78.78.78.78) are refused. Here's part of my pf.conf: # WAN vpn_if="tun0" # LAN int_if="vr1" # External Address ext_addr="78.78.78.78" # Serv

Issues with FTP and PF

2008-11-17 Thread Юрий Дмитришин
Hi. I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. 78.78.78.78) are refused. Here's part of my pf.conf: # WAN vpn_if="tun0" # LAN int_if="vr1" # External Address ext_addr="78.78.78.78" # Se