Re: active ftp and mpd with pf and nat
From: Shane Almeida (almeida.spam.is.evil_at_spam.is.evil.mindless.com)
Date: 06/23/05
- Previous message: Bas Keur: "Promise TX4 ... is it the`type/model`printed in i386.html ?"
- In reply to: dave: "active ftp and mpd with pf and nat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Wed, 22 Jun 2005 22:44:26 -0500
On Wed, 22 Jun 2005 15:50:40 GMT, dave wrote:
> Does anyone have a ruleset for allowing active ftp connections out from
> behind a nat, and mpd vpn connections to a server behind a nat? Both of
> these setups i'm trying to get with no success.
These rules will let clients behind the firewall do active FTP.
set skip on { lo0, $int_if }
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
If the firewall has an FTP server, you might want this instead. It will
skip the ftp-proxy for connections to the firewall.
set skip on { lo0, $int_if }
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to ! ($int_if) port 21 -> 127.0.0.1 port 8021
- Previous message: Bas Keur: "Promise TX4 ... is it the`type/model`printed in i386.html ?"
- In reply to: dave: "active ftp and mpd with pf and nat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|