On Wed, 12 Jun 2002, Jefferson Ogata wrote:

> The FTP proxy doesn't theoretically require an IP address. It just sits
> inline and adds rules as it observes PORT commands. It may not work,
> but there's no reason it couldn't work theoretically in a bridge
> configuration.

exactly. In fact, I wouldn't even consider this a proxy per se. It is not
really a man in the middle so much as an observer. It's only job is to
monitor the data flow and add a dynamic rule so the active FTP connection
back to the client succeeds. It does not intercept or modify the content of
the exchange and has no active role.


-- 
Paul B. Henson  |  (909) 869-3781  |  http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst  |  [EMAIL PROTECTED]
California State Polytechnic University  |  Pomona CA 91768

Reply via email to