Subject: Re: ipf ipnat ftp
To: rudolf <netbsd@eq.cz>
From: Pavel Cahyna <pavel.cahyna@st.mff.cuni.cz>
List: netbsd-help
Date: 05/11/2006 12:03:30
Hello,

On Thu, Apr 20, 2006 at 05:07:45AM +0200, rudolf wrote:
> OK, the first time I stumbled over the manual page for ftp-proxy(8) I was 
> distracted by the description: ``The proxy uses pf(4) and expects to have the 
> FTP control connection as described in services(5) redirected to it via a pf(4) 
> rdr command.''; now I see it can also be used with ipf, thanks.

- have you tried it? does the ftp-proxy work well with ipf?

- what about this patch to the man page?

Index: libexec/ftp-proxy/ftp-proxy.8
===================================================================
RCS file: /home/pavel/cvs/src/dist/pf/libexec/ftp-proxy/ftp-proxy.8,v
retrieving revision 1.8
diff -u -r1.8 ftp-proxy.8
--- libexec/ftp-proxy/ftp-proxy.8	29 Jul 2005 21:34:18 -0000	1.8
+++ libexec/ftp-proxy/ftp-proxy.8	20 Apr 2006 21:10:59 -0000
@@ -68,10 +68,14 @@
 is a proxy for the Internet File Transfer Protocol.
 The proxy uses
 .Xr pf 4
+or
+.Xr ipnat 4
 and expects to have the FTP control connection as described in
 .Xr services 5
 redirected to it via a
-.Xr pf 4
+.Xr pf.conf 5
+or
+.Xr ipnat.conf 5
 .Em rdr
 command.
 An example of how to do that is further down in this document.
@@ -124,7 +128,9 @@
 .It Fl i
 Set
 .Nm ftp-proxy
-for use with IP-Filter.
+for use with the
+.Xr ipnat 4
+part of IP-Filter.
 .It Fl M Ar maxport
 Specify the upper end of the port range the proxy will use for the
 data connections it establishes.
@@ -233,7 +239,9 @@
 and requires that FTP connections are redirected to it using a
 .Em rdr
 rule.
-A typical way to do this would be to use either an ipnat rule such as
+A typical way to do this would be to use either an 
+.Xr ipnat.conf 5
+rule such as
 .Bd -literal -offset 2n
 int_if = \&"xl0\&";
 rdr $int_if 0/0 port 21 -\*[Gt] 127.0.0.1 port 8021 tcp