Re: ftp-proxy and carp

2008-03-13 Thread Joe Warren-Meeks
On Wed, Mar 12, 2008 at 12:28:00PM +, Joe Warren-Meeks wrote: Hey chaps, I have a pair of OpenBSD firewalls running CARP Thanks for your help guys. -- joe. Daddy, can we play a game of brinkmanship?

ftp-proxy and carp

2008-03-12 Thread Joe Warren-Meeks
Hey chaps, I have a pair of OpenBSD firewalls running CARP $ uname -a OpenBSD ns-gs-fw2.host.nativ-systems.com 4.2 NS-GS-FW#0 i386 They both have internal and external addresses and an internal carp and external carp address shared. Now, they are protecting an FTP server that I want to allow

Re: ftp-proxy and carp

2008-03-12 Thread smartTERRA NOC
Am 12.03.2008 um 13:28 schrieb Joe Warren-Meeks: Hey chaps, Hey, Ideally, I'd have ftp-proxy bind to the CARP address, so that if there was a failover event, inbound ftp would still work. I set up an local ip address via interface lo1 and redirects all incoming ftp requests to ftp-proxy

Re: ftp-proxy and carp

2008-03-12 Thread Calomel
Joe, You can bind your reverse ftp-proxy to the carp addresses. BTW, a problem you might eventually see is when the firewalls fail over. Current connections to the ftp server will die when the backup firewall takes over because it does not have ftp-proxy anchors from the first firewall