[src/trunk]: src/share/examples/npf Passive FTP works as a client without thi...

[sevan <sevan%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/301d0c9ee8f6
branches:  trunk
changeset: 459714:301d0c9ee8f6
user:      sevan <sevan%NetBSD.org@localhost>
date:      Sun Sep 22 19:30:15 2019 +0000

description:
Passive FTP works as a client without this and we're not hosting an FTP server (port are not listed in services_tcp)

diffstat:

 share/examples/npf/soho_gw-npf.conf |  5 +----
 1 files changed, 1 insertions(+), 4 deletions(-)

diffs (19 lines):

diff -r 6d236446416b -r 301d0c9ee8f6 share/examples/npf/soho_gw-npf.conf
--- a/share/examples/npf/soho_gw-npf.conf       Sun Sep 22 18:45:19 2019 +0000
+++ b/share/examples/npf/soho_gw-npf.conf       Sun Sep 22 19:30:15 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: soho_gw-npf.conf,v 1.17 2019/09/21 23:55:01 sevan Exp $
+# $NetBSD: soho_gw-npf.conf,v 1.18 2019/09/22 19:30:15 sevan Exp $
 #
 # SOHO border
 #
@@ -52,9 +52,6 @@
        # Allow inbound traffic for services hosted on UDP
        pass stateful in proto udp to $ext_addrs port $services_udp
 
-       # Passive FTP
-       pass stateful in proto tcp to $ext_addrs port 49151-65535
-
        # Allow being tracerouted
        pass stateful in proto udp to $ext_addrs port 33434-33600
 }