Am Montag, den 02.10.2006, 19:10 -0400 schrieb Scott Ullrich:
> You want to use:
> 
>           o afterfilterchangeshellcmd
> 
> http://pfsense.blogspot.com/2005/06/new-xml-system-tag-introduced.html

No, since system_start_ftp_helpers() is launched _after_
filter_configure_sync in /etc/rc.bootup.

Scott, beside that it's really ugly hacking around a problem in
principle. Shouldn't we discuss how to solve it problem-oriented instead
of hacking around with "*shellcmd"? Where, if not here, is the best
place to talk about it? I invite all devs to make proposals to the
everlasting FTP problem.

What do we need?

1) FTP-Server on the inside:

  is it behind NAT?   ----  no 
   |                        |
 yes                        |
   |                        |
 use pftpx, see 2)      use ftpsesame


2) FTP-Server on the outside:

  is your public IP on WAN interface? --- no
   |                                       |
  yes                    what public reachable IP to use as source IP?
   |                                       |
pftpx -c xxxx -g xxxx ifaceIP    pftpx -c xxxx -g xxxx -p pubIP ifaceIP

3) A way to mix these possibilities:
   what to do, if someone has an FTP-Server in DMZ with public reachable
   IPs and also one FTP-Server internally with a private IP?

BR, PIT


---------------------------------------------------------------------------
 copyleft(c) by |   _-_      any new sendmail hole I have to fix
 Peter Allgeyer | 0(o_o)0   before going on vacations?   -- Seen on #Linux
---------------oOO--(_)--OOo-----------------------------------------------


Reply via email to