Subject: Re: ipf ipnat ftp
To: rudolf <netbsd@eq.cz>
From: Pavel Cahyna <pavel.cahyna@st.mff.cuni.cz>
List: netbsd-help
Date: 05/11/2006 12:03:30
Hello,
On Thu, Apr 20, 2006 at 05:07:45AM +0200, rudolf wrote:
> OK, the first time I stumbled over the manual page for ftp-proxy(8) I was
> distracted by the description: ``The proxy uses pf(4) and expects to have the
> FTP control connection as described in services(5) redirected to it via a pf(4)
> rdr command.''; now I see it can also be used with ipf, thanks.
- have you tried it? does the ftp-proxy work well with ipf?
- what about this patch to the man page?
Index: libexec/ftp-proxy/ftp-proxy.8
===================================================================
RCS file: /home/pavel/cvs/src/dist/pf/libexec/ftp-proxy/ftp-proxy.8,v
retrieving revision 1.8
diff -u -r1.8 ftp-proxy.8
--- libexec/ftp-proxy/ftp-proxy.8 29 Jul 2005 21:34:18 -0000 1.8
+++ libexec/ftp-proxy/ftp-proxy.8 20 Apr 2006 21:10:59 -0000
@@ -68,10 +68,14 @@
is a proxy for the Internet File Transfer Protocol.
The proxy uses
.Xr pf 4
+or
+.Xr ipnat 4
and expects to have the FTP control connection as described in
.Xr services 5
redirected to it via a
-.Xr pf 4
+.Xr pf.conf 5
+or
+.Xr ipnat.conf 5
.Em rdr
command.
An example of how to do that is further down in this document.
@@ -124,7 +128,9 @@
.It Fl i
Set
.Nm ftp-proxy
-for use with IP-Filter.
+for use with the
+.Xr ipnat 4
+part of IP-Filter.
.It Fl M Ar maxport
Specify the upper end of the port range the proxy will use for the
data connections it establishes.
@@ -233,7 +239,9 @@
and requires that FTP connections are redirected to it using a
.Em rdr
rule.
-A typical way to do this would be to use either an ipnat rule such as
+A typical way to do this would be to use either an
+.Xr ipnat.conf 5
+rule such as
.Bd -literal -offset 2n
int_if = \&"xl0\&";
rdr $int_if 0/0 port 21 -\*[Gt] 127.0.0.1 port 8021 tcp