Problems with pf + ftp-proxy on gateway

I'm trying to use pf + ftp-proxy n a 6.1-PRERELEASE machine.

I have this line on inetd.conf:

ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy
ftp-proxy -n

And this lines on pf.conf:

rdr on $int_if proto tcp from any to any port ftp -> 127.0.0.1 port ftp-proxy
pass in quick on $ext_if inet proto tcp from any port ftp-data to
$ext_if:0 user proxy flags S/SA keep state

When one machine inside my network (e.g. 192.168.x.x) connects to an
external ftp server (e.g. ftp.FreeBSD.org), data connection doesn't
work.

Connection comes to my firewall and is accepted but connection is not
established and stay like this here:

self tcp 200.x.x.x:57625 <- 200.x.x.x:20 ESTABLISHED:FIN_WAIT_2

Any kind of help will be appreciate

thanks
--
Renato Botelho
_______________________________________________
freebsd-stable@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: FTP server behind a PF firewall (including NAT)
    ... > How did you configure ftp-proxy on your firewall? ... > proxying for FTP servers behind a PF firewall configured for NAT, ... > for FTP clients. ... the port that I've assigned for control connections. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: FTP server behind a PF firewall (including NAT)
    ... >How do I make my FTP server work? ... Mine is similar, except that my firewall is ipfw, and I have exactly ... any information in the man pages about using any kind of ftp-proxy ... enabling & configuring ftp-proxy, and what rules I would need in my ...
    (comp.unix.bsd.freebsd.misc)
  • Re: FTP server behind a PF firewall (including NAT)
    ... How did you configure ftp-proxy on your firewall? ... proxying for FTP servers behind a PF firewall configured for NAT, ... "In the social equation, the value of a single life is nil; ...
    (comp.unix.bsd.freebsd.misc)