Subject: IPFilter and passive FTP Servers
To: None <netbsd-users@netbsd.org>
From: Sam Carleton <sam@linux-info.net>
List: netbsd-users
Date: 11/26/2002 09:44:55
Folks,

I have installed wu-ftp on a machine behine the NetBSD firewall.  I have
configured wu-ftp to use ports 15000 through 19999 for passive FTP.  Now
I need to figure out how to configure the firewall.  I believe I have
the ipf.conf config correct:

pass in quick on iy0 proto tcp from any to 192.168.0.5/32 port 15000 >< 20000 flags S keep state

I am trying to figure out how to configure ipnat.conf.  The best I can figure is:

rdr iy0 0/0 port 26000:31999 -> 192.168.0.5 port 26000:31999 tcp

But am concerned about trying it considering I am currently 100 miles from the
firewall:)

Is my guess correct?  If not, could some straigten me out?

Sam