Is this possible?
I have ftp-proxy working for the first ftp server in behind the NAT.
The second ftp server can not be connected to from outside the NAT
using the external ip I have assigned for it.
I have added rules to rc.local thus, and also have the ftp-proxy/*
anchors in pf.conf:
/usr/sbin/ftp-proxy -r -R 192.168.19.4 -p 21 -b externalip1
/usr/sbin/ftp-proxy -r -R 192.168.19.122 -p 21 -b externalip2
Connections to externalip1 work just fine using ftp.
tcpdump -nettti pflog0 tells me this:
Jan 22 19:20:48.761484 rule 12/(match) pass in on bge0: outsideip.
1457 > externalip2.21: [|tcp] (DF)
pf tells me this:
pass in on bge0 inet proto tcp from any to externalip1 port = ftp
flags S/SA keep state
pass out on em1 inet proto tcp from any to 192.168.19.4 port = ftp
user = 71 flags S/SA keep state
pass in log on bge0 inet proto tcp from any to externalip2 port = ftp
flags S/SA keep state
pass out log on em1 inet proto tcp from any to 192.168.19.121 port =
ftp user = 71 flags S/SA keep state
anchor "ftp-proxy/*" all
Am I doing something wrong or is this just an unsupported configuration?
Many thanks,
Satadru
