Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
Ok! I am really having a bad times playing with ftp-proxy! It is working, but rules inserted are not showed, like in: [EMAIL PROTECTED] pfctl -sn -a 'ftp-proxy/*' [EMAIL PROTECTED] pfctl -sr -a 'ftp-proxy/*' [EMAIL PROTECTED] pfctl -sr -a '*' scrub out on pppoe0 all max-mss 1452 fragment reassemb

Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
Yes, i was receiving file. But a look as ftp-proxy (8) : In case of active mode (PORT or EPRT): rdr from $server to $proxy port $port -> $client pass quick inet proto tcp \ from $server to $client port $port In case of passive mode (PASV or EPSV): nat from $cli

Re: ftp and pf (nat)

2007-05-14 Thread Joachim Schipper
On Mon, May 14, 2007 at 02:43:34PM -0300, John Nietzsche wrote: > On 5/14/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: > >On Mon, May 14, 2007 at 01:24:07PM -0300, John Nietzsche wrote: > >> Dear gentleman/madam, > >> > >> i have installed my openbsd firewall and i am trying to get ftp client >

Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
According to pf FAQ: "With passive mode FTP (the default mode with OpenBSD's ftp(1) client), the client requests that the server pick a random port to listen on for the data connection. The server informs the client of the port it has chosen, and the client connects to this port to transfer the d

Re: ftp and pf (nat)

2007-05-14 Thread Joachim Schipper
On Mon, May 14, 2007 at 01:24:07PM -0300, John Nietzsche wrote: > Dear gentleman/madam, > > i have installed my openbsd firewall and i am trying to get ftp client > behind working. > It is working nicely. But, when i try to lookup and the nat rules > inserted by ftp-proxy, i get nothing : > > [EM