Angelo,

I just typed, at command line:

ps -aux | grep pftpx

This command permits to see pftpx processes.

And 192.168.XXX.1 is address for LAN interface (XXX some number from 0 to 
254).

Scott's answer was enough for my question. There is allways one pftpx 
process, no matter if FTP Proxy Helper is disabled in all interfaces.

I think I understud how FTP Proxy Helper works. FTP Proxy server works at 
127.0.0.1 and ALLWAYS has WAN as gateway. It uses ports 8021, 8022, ... 
(depending in witch interfaces you enable).

I found it usefull if you don't want dynamic destination port for your LANs, 
because is FTP Proxy who dialogs with remote FTP server. This permit, for 
example, to block connections from your LANs to ports greater than 1023 
without loosing FTP uploads/downloads. However FTP Proxy is'nt multiWAN, so 
if you have more than one WAN all FTP connections will use ALLWAYS your 
default gateway.

FTP-Proxy Helper is a functionallity of OpenBSD PF (Packet Filter):

http://www.openbsd.org/faq/pf/ftp.html#client

Since 5.3 release, FreeBSD comes with OpenBSD PF integrated:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-pf.html

pfSense 1.0.1 is FreeBSD 6.1 based ...

Best regards,

Josep Pujadas


---------- Original Message -----------
From: Angelo Turetta <[EMAIL PROTECTED]>
To: [email protected]
Sent: Sun, 03 Dec 2006 19:00:48 +0100
Subject: Re: [pfSense Support] FTP-Proxy Helper

> Scott Ullrich wrote:
> > On 12/1/06, Josep Pujadas i Jubany <[EMAIL PROTECTED]> wrote:
> >>
> >> # ps -aux | grep pftpx
> >> proxy  10495  0.0  0.2   656   496  ??  Ss    8:40PM
> >> 0:00.99 /usr/local/sbin/pftpx -c 8021 -g 8021 192.168.XXX.1
> >> root   24713  0.0  0.4  1464   952  p0  R+    8:05PM   0:00.01 grep 
pftpx
> >>
> >> where 192.168.XXX.1 is my LAN interface.
> >>
> >> Is it normal?
> >
> > Yes.
> 
> But there's no reason at all to put that IP address on the pftpx command
> line (it's not even parsed), as well as "-g 8021", which is not used
> unless '-f' is specified.
> 
> Angelo.
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
------- End of Original Message -------


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to