Re: active ftp and mpd with pf and nat

From: Shane Almeida (almeida.spam.is.evil_at_spam.is.evil.mindless.com)
Date: 06/23/05

  • Next message: Christopher A. Kantarjiev: "newisys opteron support?"
    Date: Wed, 22 Jun 2005 22:44:26 -0500
    
    

    On Wed, 22 Jun 2005 15:50:40 GMT, dave wrote:
    > Does anyone have a ruleset for allowing active ftp connections out from
    > behind a nat, and mpd vpn connections to a server behind a nat? Both of
    > these setups i'm trying to get with no success.

    These rules will let clients behind the firewall do active FTP.
    set skip on { lo0, $int_if }
    nat on $ext_if from $int_if:network to any -> ($ext_if)
    rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

    If the firewall has an FTP server, you might want this instead. It will
    skip the ftp-proxy for connections to the firewall.
    set skip on { lo0, $int_if }
    nat on $ext_if from $int_if:network to any -> ($ext_if)
    rdr on $int_if proto tcp from any to ! ($int_if) port 21 -> 127.0.0.1 port 8021


  • Next message: Christopher A. Kantarjiev: "newisys opteron support?"

    Relevant Pages

    • Re: NAT with IP Filters
      ... connections which I mean, from a private interface). ... Static NAT connection on purpose. ... you have disabled the firewall if you aren't filtering specific ports. ...
      (microsoft.public.windows.server.networking)
    • Re: How to set up my grandson with his laptop on my DSL
      ... NAT is nothing like a firewall. ... connections; it will basically just decide which computer on the LAN ... will stop inbound/outbound connections (if setup and configured ...
      (microsoft.public.windowsxp.hardware)
    • Re: Seemingly obvious Linux / BSD firewall question
      ... > a stateful firewall, ... > also be doing NAT translation. ... assume you're going to use NAT with stateful connections, ...
      (Security-Basics)
    • Re: Would a firewall prevent Sasser worm?
      ... >you are saying that NAT is a perfectly good firewall for a home ... A NAT router provides adequate protection for home users. ... These devices are designed to block inbound connections while allowing ...
      (comp.security.firewalls)
    • Re: Would a firewall prevent Sasser worm?
      ... >you are saying that NAT is a perfectly good firewall for a home ... A NAT router provides adequate protection for home users. ... These devices are designed to block inbound connections while allowing ...
      (alt.computer.security)