Re: ftp-proxy binat design -- Was: Re: binat questions

2007-07-02 Thread Karl O. Pinc
On 07/01/2007 12:53:59 PM, Camiel Dobbelaar wrote: On Sun, 1 Jul 2007, Karl O. Pinc wrote: The basic idea is to modify ftp-proxy so it adds binat rules to it's anchors. You cannot use port in binat rules, so that would not work. I think this problem can only be fixed in pf itself,

ftp-proxy binat design -- Was: Re: binat questions

2007-07-01 Thread Karl O. Pinc
On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: One thing to watch out for with binat: you can't use it with ftp-proxy(8), since binat is of higher priority than the rdr or nat rules which are added to the anchor. The workaround there is to list nat and rdr separately. I just figured this

Re: ftp-proxy binat design -- Was: Re: binat questions

2007-07-01 Thread Camiel Dobbelaar
On Sun, 1 Jul 2007, Karl O. Pinc wrote: On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: One thing to watch out for with binat: you can't use it with ftp-proxy(8), since binat is of higher priority than the rdr or nat rules which are added to the anchor. The workaround there is to