On 2012-11-28 14:33, Chris Smith wrote: > On Wed, Nov 28, 2012 at 7:29 AM, Stuart Henderson <[email protected]> > wrote: >> If the control connection is encrypted as with ftp+tls, then ftp-proxy >> *cannot* work, as it cannot read the commands. So, if this is with NAT, >> you can't rely on ftp-proxy to fix things up, you will need ftp+tls >> software where you can manually set the external address. > > Yes, it's ftp+tls. > This works with a standard home router (don't know what they're doing > to allow it and ftp to work fine), but not with the OpenBSD firewall. > It is only one server that I have to deal with so if I skip ftp-proxy > for that one target address should it work OK then? > > Thanks, > > Chris >
Since you say this works with a standard home router, have you checked if maybe the server software uses nat pmp or something similar for port redirection? -- Hugo Osvaldo Barrera

