On Fri, Jan 02, 2004 at 10:46:54PM -0500, Jason Dixon wrote:
> On Fri, 2004-01-02 at 15:22, stan wrote:
> > I'm trying to build an OpenBSD mcahine to reoace an aging OpenBSD machine
> > thta I use as a firewall between my local network, and the internet. I
> > atach via a cablemodem.
> >
> > I've got a pf.conf modifed from one of the faq examples, and it mostly
> > works.
> >
> > What doesn't work if outbound ftp. I can ftp out from the firewall itself,
> > but not from the machines inside the network.
>
> You haven't mentioned if you're trying to get passive or active FTP to
> work. I suggest you search the archives for ftp-proxy and review the
> following document for hints.
>
> http://www.deadly.org/article.php3?sid=20020130012631
>
Thanks, taht's a very useful document!
I'm working my way throuhg it at the moment, and i have a few questions.
I want to set up to use active ftp, that's what I think I had with ipf.
I added teh entry to /ect/services that it discuses. Then it talks about
etc.inetd.conf. I found this entry in mine, which was installed by
default, but commented out, and I had uncomented in an atempt to make
things work.
127.0.0.1:8021 stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy
So, I comented it back out, and added this:
ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy \
ftp-proxy -n -V -D3 -u ftp-proxy -m 55000 -M 57000 -t 300
And this is when I started to get puzzled. The next refernce is to a
/etc/nat.conf file. I thought this file was obsoleted with teh move from
ifp to pf. Am I wrong? I don't have one, and man nat.conf doesn't show any
entries for it.
So, I'm kind of stuck at the moment. Should I cretae this file?
--
"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
-- Benjamin Franklin
