From 341972f201043207e661a28efb29ceedd7d818b0 Mon Sep 17 00:00:00 2001 From: Scott Ullrich Date: Mon, 16 Jan 2006 00:09:16 +0000 Subject: [PATCH] Don't forget LAN rule for PFTPX lo0 --- etc/inc/filter.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 2fc8b0bc8a..4a8f9a8610 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1400,6 +1400,7 @@ EOD; anchor "ftpproxy" anchor "pftpx/*" +pass in quick on $lanif inet proto tcp from any to (lo0) port 21 keep state label "FTP PROXY: Allow traffic to localhost" pass in quick on $wanif inet proto tcp from port 20 to ($wanif) port > 49000 user proxy flags S/SA keep state label "FTP PROXY: PASV mode data connection" EOD;