ftp throu transparent filtering bridge

2004-11-23 Thread Roman Marcinek
Hi Guys, an excusse for my question: I am relativelly new to the OpenBSD (and PF) though not so the other firewall/filtering/nating :) Now, few days ago I've set up a transparent bridge on freshly installed OpenBSD 3.6 (my experience with OpenBSD started with 3.5 used as a desktop, just to

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Laurent Cheylus
Hi, On Tue, Nov 23, 2004 at 11:24:18AM +0100, Roman Marcinek wrote: As the bridge is completely transparent and without ANY IP number on any of the two cards I cannot solve my ftp problem via local ftp-proxy solution descibed in the documentation. Also setting simple rules like: pass in

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Camiel Dobbelaar
On Tue, 23 Nov 2004, Roman Marcinek wrote: Are there any smarted solutions I haven't found yet? I know that linux's iptables make use of special connection tracking module for ftp to handle that problem but ... is there anything like this for OpenBSD? Ok, let me plug my own program

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Camiel Dobbelaar
On Tue, 23 Nov 2004, Camiel Dobbelaar wrote: On Tue, 23 Nov 2004, Roman Marcinek wrote: Are there any smarted solutions I haven't found yet? I know that linux's iptables make use of special connection tracking module for ftp to handle that problem but ... is there anything like this

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Moritz Grimm
Roman Marcinek wrote: Are there any smarted solutions I haven't found yet? I know that linux's iptables make use of special connection tracking module for ftp to handle that problem but ... is there anything like this for OpenBSD? If things like this are solvable shouldn't the solutions find

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Max Laier
On Tuesday 23 November 2004 12:50, Camiel Dobbelaar wrote: On Tue, 23 Nov 2004, Camiel Dobbelaar wrote: On Tue, 23 Nov 2004, Roman Marcinek wrote: Are there any smarted solutions I haven't found yet? I know that linux's iptables make use of special connection tracking module for ftp

Re: ftp throu transparent filtering bridge

2004-11-23 Thread A
Well, it certainly does the job! :) To Roman's initial question though, monitoring ftp connections is really an application layer problem/responsibility. pf is lower level and would need to implement (pretty much) a full protocol layer to monitor ftp. Anyway, there you have it.. check out

Re: ftp throu transparent filtering bridge

2004-11-23 Thread Roman Marcinek
Yes, that's true :) ftpsesame really works as said so ... thanks to all :) Romek