Re: Adding support for FTP

2005-10-25 Thread Travis H.
I am attempting to do something along these lines using a python+pcap sniffer to watch for certain traffic, and use DFD (specifically dfd_keeper) to make the changes to the firewall. It will also be able to tear down the connection when it sees it close (or after a timeout - rules can be made with

Re: Adding support for FTP

2005-10-25 Thread Travis H.
> http://www.enyo.de/fw/security/java-firewall/ Towards the end... RFC 3514... check the date on that RFC. HHOS at its best. -- http://www.lightconsulting.com/~travis/ -><- "We already have enough fast, insecure systems." -- Schneier & Ferguson GPG fingerprint: 50A1 15C5 A9DE 23B9 ED98 C93E 3

Re: Adding support for FTP

2005-10-25 Thread James Wright
Kevin said the following on 10/24/05 12:55: On 10/24/05, Daniel Hartmeier <[EMAIL PROTECTED]> wrote: On Mon, Oct 24, 2005 at 06:14:49PM +0930, Aluminium Oxide wrote: While is the satisfactory and workable solution using a rdr and passing the role to an ftp-proxy, I would like to add to

Re: Adding support for FTP

2005-10-24 Thread Kevin
On 10/24/05, Daniel Hartmeier <[EMAIL PROTECTED]> wrote: > On Mon, Oct 24, 2005 at 06:14:49PM +0930, Aluminium Oxide wrote: >>While is the satisfactory and workable solution using a rdr and passing >>the role to an ftp-proxy, I would like to add to pf the capability to >>actually monitor the erecti

Adding support for FTP

2005-10-24 Thread Aluminium Oxide
Hi, I would like to know what interest there is in, and ask for some help with adding support for FTP with pf's NAT. While is the satisfactory and workable solution using a rdr and passing the role to an ftp-proxy, I would like to add to pf the capability to actually monitor the erection

Re: Adding support for FTP

2005-10-24 Thread Daniel Hartmeier
On Mon, Oct 24, 2005 at 06:14:49PM +0930, Aluminium Oxide wrote: > which would define a rule which listens to requests from $client_hosts > addressed to $dest_server on port 20 (and 21), and (1) listens for the > packet from the client requesting a port, and then (2) reads from the > contents of t