ftp and pf (nat)

2007-05-14 Thread John Nietzsche
Dear gentleman/madam, i have installed my openbsd firewall and i am trying to get ftp client behind working. It is working nicely. But, when i try to lookup and the nat rules inserted by ftp-proxy, i get nothing : [EMAIL PROTECTED] pfctl -sn -a '*' nat-anchor ftp-proxy/* all nat-anchor neif on

Re: ftp and pf (nat)

2007-05-14 Thread Joachim Schipper
On Mon, May 14, 2007 at 01:24:07PM -0300, John Nietzsche wrote: Dear gentleman/madam, i have installed my openbsd firewall and i am trying to get ftp client behind working. It is working nicely. But, when i try to lookup and the nat rules inserted by ftp-proxy, i get nothing : [EMAIL

Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
According to pf FAQ: With passive mode FTP (the default mode with OpenBSD's ftp(1) client), the client requests that the server pick a random port to listen on for the data connection. The server informs the client of the port it has chosen, and the client connects to this port to transfer the

Re: ftp and pf (nat)

2007-05-14 Thread Joachim Schipper
On Mon, May 14, 2007 at 02:43:34PM -0300, John Nietzsche wrote: On 5/14/07, Joachim Schipper [EMAIL PROTECTED] wrote: On Mon, May 14, 2007 at 01:24:07PM -0300, John Nietzsche wrote: Dear gentleman/madam, i have installed my openbsd firewall and i am trying to get ftp client behind

Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
Yes, i was receiving file. But a look as ftp-proxy (8) : In case of active mode (PORT or EPRT): rdr from $server to $proxy port $port - $client pass quick inet proto tcp \ from $server to $client port $port In case of passive mode (PASV or EPSV): nat from

Re: ftp and pf (nat)

2007-05-14 Thread John Nietzsche
Ok! I am really having a bad times playing with ftp-proxy! It is working, but rules inserted are not showed, like in: [EMAIL PROTECTED] pfctl -sn -a 'ftp-proxy/*' [EMAIL PROTECTED] pfctl -sr -a 'ftp-proxy/*' [EMAIL PROTECTED] pfctl -sr -a '*' scrub out on pppoe0 all max-mss 1452 fragment