From 4591afafabf80a7c4f5344c7e8c8a37f78bb6843 Mon Sep 17 00:00:00 2001
From: Max Laier <mlaier@FreeBSD.org>
Date: Fri, 27 Jan 2006 17:16:20 +0000
Subject: Document the user/group LOR in our sample pf.conf

Submitted by:	Devon H. O'Dell
---
 etc/pf.conf | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'etc/pf.conf')

diff --git a/etc/pf.conf b/etc/pf.conf
index d79f87e64e22..2dc9ac5a7d44 100644
--- a/etc/pf.conf
+++ b/etc/pf.conf
@@ -72,6 +72,10 @@
 #pass in on $ext_if proto { tcp, udp } from any to <foo> port 80 keep state
 
 # pass incoming ports for ftp-proxy
+#pass in on $ext_if inet proto tcp from any to $ext_if port > 49151 keep state
+
+# Alternate rule to pass incoming ports for ftp-proxy
+# NOTE: Please see pf.conf(5) BUGS section before using user/group rules.
 #pass in on $ext_if inet proto tcp from any to $ext_if user proxy keep state
 
 # assign packets to a queue.
-- 
cgit v1.2.3