Date: Sun, 27 Jan 2008 19:48:33 +0100 From: Matthias Kellermann <matthias@adminlife.net> To: freebsd-questions@freebsd.org Subject: Outgoing FTP connections with pf and ftp-proxy Message-ID: <479CD201.7050000@adminlife.net>
next in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigC3125B7206AC47220C71C0D3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi list,
I'm trying to get outgoing FTP sessions to work with pf and
ftp/ftp-proxy in a NAT environment.
My simple config on a test machine looks like this:
------------------------------------------------------------------
int_if =3D "rl0"
localnet =3D "192.168.0.0/24"
tcp_services =3D "{ ssh, domain, www, https, ftp }"
udp_services =3D "{ domain }"
nat on $int_if from $localnet to any -> ($int_if)
rdr pass proto tcp from any to any port ftp -> 127.0.0.1 port 8021
block all
pass from $localnet to any keep state
pass proto udp to any port $udp_services keep state
pass out proto tcp to any port $tcp_services keep state
pass in proto tcp from any to any user proxy keep state
pass in proto tcp from any to any port ssh keep state
------------------------------------------------------------------
FTP login works fine. But if I want to do a "ls" on the FTP server I get
the following error on the client (no matter if NAT client or gateway):
425 Failed to establish connection.
Any idea whats wrong with my setup?
Thanks,
Matthias
--------------enigC3125B7206AC47220C71C0D3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHnNIFGSi/LIXxufURAswBAJ99Hec35toOfxpkGnh/oKauG4tHPACfRFMq
7YCiD41lQy+ZYLmtwOWlZbo=
=kTRN
-----END PGP SIGNATURE-----
--------------enigC3125B7206AC47220C71C0D3--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?479CD201.7050000>