On 29/07/2002, Ed White <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]:
> I've read inside USENIX PF paper that various application proxies are
> planned: what type of use is planned ?

Whatever some people are sending in code/diffs for :)

> Would they permit traffic like ftp-proxy do with active FTP across NAT or
> will be application level filters ?

Eh? I think you misunderstood the concept and working of ftp-proxy.

Actually active FTP can be used via NAT rules, without ftp-proxy.
ftp-proxy comes espcially into target, if you want to use passive ftp.
And it's a transparent application level gateway there.

> Also I would like to know if ftp-proxy could be used to protect/filter a FTP
> server even if it's secure, like OpenBSD ftpd.

Yes, while IIRC rev-proxy-support is only in -current. Daniel?

> In the end, what would be the target:
> Protect a service or Permit a service ?

What's the difference? :) Usually you use paketfilter to protect
permissions ;0

ciao
-- 
 Philipp Buehler  -  <[EMAIL PROTECTED]>  -  http://sysfive.com/
 sysfive.com GmbH - UNIX. Networking. Security. Applications.
 Steilshooperstr. 184, 22305 Hamburg, Germany - GSM +49-179-1136646

Reply via email to