diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 2fc8b0bc8a..4a8f9a8610 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1400,6 +1400,7 @@ EOD; anchor "ftpproxy" anchor "pftpx/*" +pass in quick on $lanif inet proto tcp from any to (lo0) port 21 keep state label "FTP PROXY: Allow traffic to localhost" pass in quick on $wanif inet proto tcp from port 20 to ($wanif) port > 49000 user proxy flags S/SA keep state label "FTP PROXY: PASV mode data connection" EOD;