Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 03:58:44 -0000
From:      Kelsey Cummings <kgc@microshaft.org>
To:        pf4freebsd@freelists.org
Subject:   [pf4freebsd] Re: Problem with ftp-proxy.
Message-ID:  <3FE3BCD2.8000405@microshaft.org>
In-Reply-To: <3FE281C7.2000204@dequim.ist.utl.pt>
References:  <20031203113200.780a87da.matteo.niccoli@finsystem.net> <20031203170735.GM14907@zot.electricrain.com> <3FE27676.1080607@microshaft.org> <3FE281C7.2000204@dequim.ist.utl.pt>

next in thread | previous in thread | raw e-mail | index | archive | help
Bruno Afonso wrote:

>Kelsey Cummings wrote:
>
> =20
>
>>Gregory P. Smith wrote:
>>
>>
>>   =20
>>
>>>These are my rules that work for ftp proxy on my nat+firewall system.
>>>
>>>
>>>     =20
>>>
>>Just out of curiosity, anyone have the FTP proxy working on a bridgemod=
e=20
>>firewall?  I *just can't* get it to work right, even on  my OpenBSD=20
>>firewall.
>>   =20
>>
>
>If you're bridging, you do not have ips, so it does not make sense to=20
>use a proxy.
>

I should probably clarify that it's bridging and routing.

I have a /29 briged and a /28 routed via my DSL circuit.  Strange, but I=20
work for the ISP that I get the service from.

The reasons for having this is that my workstations go on the bridged=20
IPs to allow for Multicast reception, sourcing on them.  I've yet to=20
find a IGMP proxy for unix that is functional, otherwise everything=20
would live on the routed block.  (Which right now is unused.)

The 'wan' IP of my firewall is the first of the bridged IPs bound to=20
dc0, my workstation, the second, out dc1 via bridge group of dc0 and dc1

I'd hoped to be able to use the ftp proxy from my workstations so as to=20
not have to open the backchannels, etc.

-K









Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FE3BCD2.8000405>