ipfilter和QQ的问题

afanofamd

我在我的网关主机（FreeBSD4.8）上应用了如下的ipfilter规则
block in quick all with short
block in quick all with ipopts
block in quick all with frag
block in quick all with opt lsrr
block in quick all with opt ssrr


pass in quick on tun0 proto tcp from any to any port = 20 keep state
pass in quick on tun0 proto tcp from any to any port = 21 keep state

pass in quick on tun0 proto tcp from any to any  port = 22 keep state

pass in quick on tun0 proto tcp from any to any port = 25 keep state
pass in quick on tun0 proto tcp from any to any port = 110 keep state

pass in quick on tun0 proto tcp from any to any port = 80 keep state

#pass in quick on tun0 proto tcp from any to any port = 3306 keep state

pass in quick on tun0 proto tcp from any to any port = ftp flags S/SA keep state
pass in quick on tun0 proto tcp from any to any port = ftp-data flags S/SA keep state
pass in quick on tun0 proto tcp from any to any port 30000 >;< 50001 flags S/SA keep state

pass out on tun0 proto icmp all keep state
pass out on tun0 proto tcp/udp from any to any keep state

pass in on rl0 all
pass out on rl0 all
pass in on lo0 all
pass out on lo0 all


发现内网的qq主动呼叫外网用户没有问题，但是外网用户不能主动呼叫内网用户
不知道还需要开放哪些端口？

syzlmr

pass in quick on tun0 proto tcp from any to any port = 5190 flags S/SA keep state