-----Camiel Dobbelaar <[EMAIL PROTECTED]> wrote: -----
To: [EMAIL PROTECTED] From: Camiel Dobbelaar <[EMAIL PROTECTED]> Date: 05/11/2006 09:39AM cc: misc@openbsd.org Subject: Re: ftp-proxy isssues On Thu, 11 May 2006, [EMAIL PROTECTED] wrote: > > pass in on $ext_if inet proto tcp from any \ > > to $ext_if port 55000 >< 57000 user proxy \ > > flags S/SA keep state > > C>You don't need this anymore. > > Ah, okay, how come i don't need this anymore, i must be missing and not > understanding the matters properly. C>You don't need it, because the proxy takes care of _all_ data C>connections C>itself now, using the anchors. Your only job is to pass the control C>(port C> 21) connections, ftp-proxy takes care of the rest. [SNIP] Thanks for the leads and the clarification. It's clear now. What wasn't clear IMHO is the remark you mentioned above that you don't need these incomming rules anymore, because the proxy takes care of it. That is why i became confused. After you explained how it works it's clear and my worries are gone. :-) Maybe these remarks could also be included in the manual pages as change from 3.8 to 3.9? On the other hand, i should have read the upgrade document which i didn't. Bye, Reinoud.
