Re: FTP Proxy with IPF 3.4.28

[Sheldon Hearn]

On Wed, 12 Jun 2002 12:25:45 MST, "Paul B. Henson" wrote:

> > > map foo0 0/0 -> 0/0 proxy port ftp ftp/tcp
> >
> > Agreed again. Unfortunately, it simply doesn't work. Upon initiating an
> > active FTP session, no state entries appear in the NAT table.
> 
> well, just color me wrong. My colleague Ken informs me that this syntax
> does indeed work. It seems previously we were using /32 on the right. My
> mistake.

You mean you were using 0/0 -> 0/32, right?  I'm pretty sure you're
allowed a non-zero mask as long as you specify a real address, e.g.

  map fxp0 10.0.0.0/24 -> w.x.y.z/32 proxy port 21 ftp/tcp

Ciao,
Sheldon.