> > I looked at the new proxies in 4.1.9. Is there any documentation on  
> > this stuff ?

Their use is part of ipnat.

> > All I could find was one-liner in the rpcbind proxy  
> > source code. All others come with no examples or description  
> > whatsoever, or so it seems. Did I miss it ?
 
The rpcbind proxy shouldn't be supported.

> > These proxies are not 100% obvious. For example, I thought one uses  
> > pptp proxy to handle pptp control connection (tcp port 1723), but  
> > what about GRE ? However, after looking at ip_pptp_pxy.c, it seems it  
> > is the other way around, that is this proxy handles GRE and not tcp  
> > 1723.

The PPTP proxy follows the TCP connection and automatically allows
through the right GRE packets.

Use is like this:
map pcn1 0/0 -> 0/0 proxy port 1723 pptp/tcp

> > Do I need to make any changes to support ftp EPSV proxy ?

No.

> > At the  
> > first glance it seems the proxy itself has been modified to support  
> > EPSV and I do not need to make any changes as ipfilter command syntax  
> > for it remains the same.

Correct.

Darren

Reply via email to