> > Would they permit traffic like ftp-proxy do with active FTP > across NAT or > > will be application level filters ? > > Eh? I think you misunderstood the concept and working of ftp-proxy. > > Actually active FTP can be used via NAT rules, without ftp-proxy.
Please tell me how. > ftp-proxy comes espcially into target, if you want to use passive ftp. > And it's a transparent application level gateway there. Yes. > > Also I would like to know if ftp-proxy could be used to > protect/filter a FTP > > server even if it's secure, like OpenBSD ftpd. > > Yes, while IIRC rev-proxy-support is only in -current. Daniel? FTP IRC ? and what other protocols are planned ? > > > In the end, what would be the target: > > Protect a service or Permit a service ? > > What's the difference? :) Usually you use paketfilter to protect > permissions ;0 uh ? PF can't protect from an exploit. Thanks. Ed
