Solved: Issues with passive FTP using pf

Chaotic42

Lifer
Jun 15, 2001
35,386
2,503
126
Hey all.

I'm using pf as a firewall and I cannot get it to play nice with passive FTP. I've read through the pf documentation (I even bought a book), but the standard method doesn't seem to work. I have the following in my pf.conf, per the instructions at http://www.openbsd.org/faq/pf/ftp.html:

Code:
anchor "ftp-proxy/*"
pass in quick on $int_if inet proto tcp to port 21 divert-to 127.0.0.1 port 8021

I still get passive mode errors from apt-get on clients behind the firewall. ftp-proxy is running on the firewall. Any thoughts?
 
Last edited:

Chaotic42

Lifer
Jun 15, 2001
35,386
2,503
126
Looks like I got it to work. I removed any other mention of ftp from my config file and just allowed these two lines to work their magic. I then forced a refresh of the config file and it appears to be working.