Subject: Re: ipfilter changes in 1.4.2
To: Manuel Bouyer <bouyer@antioche.lip6.fr>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: tech-net
Date: 04/27/2000 02:27:22
In some email I received from Manuel Bouyer, sie wrote:
> On Thu, Apr 27, 2000 at 12:19:41AM +1000, Darren Reed wrote:
> > [...]
> >
> > Hmm. If you do "ipnat -l" whilst the ftp session is "open", you
> > see entries besides the rules, correct ?
>
> Yes: I have a ftp session running between 132.227.63.133 and 132.227.74.11
> (no data transfer runnings, but I did a 'dir' in passive mode).
>
> List of active MAP/Redirect filters:
> map ex0 132.227.63.0/24 -> 132.227.78.1/32 proxy port ftp ftp/tcp
> map ex0 132.227.103.0/24 -> 132.227.78.1/32 proxy port ftp ftp/tcp
>
> List of active sessions:
> MAP 132.227.63.133 65227 <- -> 132.227.78.1 65227 [132.227.74.11 57149]
> MAP 132.227.63.133 65228 <- -> 132.227.78.1 65228 [132.227.74.11 21]
> proxy ftp/6 use 2 flags 0
> proto 6 flags 0 bytes 4674 pkts 30 data 0x0 psiz 0
If you do "ipfstat -s" you should be able to find an entry to match both of
the above.
Darren