From owner-freebsd-pf@FreeBSD.ORG Sun Jun 3 18:56:58 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 6F1EA16A421; Sun, 3 Jun 2007 18:56:58 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from marvin.harmless.hu (marvin.harmless.hu [195.56.55.204]) by mx1.freebsd.org (Postfix) with ESMTP id EF72313C4B8; Sun, 3 Jun 2007 18:56:57 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from localhost (marvin-mail [192.168.0.2]) by marvin.harmless.hu (Postfix) with ESMTP id 177FC7C0CF2; Sun, 3 Jun 2007 20:57:06 +0200 (CEST) X-Virus-Scanned: by amavisd-new-2.4.2 (20060627) (Debian) at harmless.hu Received: from marvin.harmless.hu ([192.168.0.2]) by localhost (marvin.harmless.hu [192.168.0.2]) (amavisd-new, port 10024) with ESMTP id V0XMMfthOSt1; Sun, 3 Jun 2007 20:57:05 +0200 (CEST) Received: from marvin.harmless.hu (localhost [127.0.0.1]) by marvin.harmless.hu (Postfix) with ESMTP id 5B46D7C0CE8; Sun, 3 Jun 2007 20:56:49 +0200 (CEST) Date: Sun, 3 Jun 2007 20:56:49 +0200 From: Gergely CZUCZY To: Max Laier Message-ID: <20070603185649.GA35611@harmless.hu> References: <20070601103549.GA22490@localhost.localdomain> <4662E18E.6010404@delphij.net> <20070603161633.GA32255@harmless.hu> <200706032052.12077.max@love2party.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=x-unknown; protocol="application/pgp-signature"; boundary="0OAP2g/MAC+5xKAE" Content-Disposition: inline In-Reply-To: <200706032052.12077.max@love2party.net> User-Agent: mutt-ng/devel-r804 (FreeBSD) Cc: Michal Mertl , freebsd-pf@freebsd.org, freebsd-current@freebsd.org Subject: Re: pf(4) status in 7.0-R X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Jun 2007 18:56:58 -0000 --0OAP2g/MAC+5xKAE Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jun 03, 2007 at 08:52:03PM +0200, Max Laier wrote: > On Sunday 03 June 2007, Gergely CZUCZY wrote: > > On Sun, Jun 03, 2007 at 11:43:10PM +0800, LI Xin wrote: > > > Max Laier wrote: > > > [...] > > > > > > > How do people feel about removing ftp-proxy from the base > > > > altogether? I think it's better off in ports anyway. Opinions? > > > > I would vote for including pftpx (the newer version in OpenBSD) iirc. > > Almost a year ago I've made an ftp service where the ftpd was jailed to > > a local IP address, and i had to use ftp-proxy for this propose. This > > reverse-proxying stuff couldn't be achived with the ftp-proxy in > > base, so i had to use the later version, which has the name pftpx > > in the ports tree. I'd vote for replacing ftp-proxy with pftpx. >=20 > Okay, but why? Is there any reason you can't use pftpx (or the newer=20 > version of ftp-proxy) from the ports tree? Why does ftp-proxy have to be= =20 > in base? Because it's somehow part of pf. Very loosely, but part of it. This is the way how pf(4) does the tracking of the data connections associated with the control connections, so it's kind of part of it. We could even use csup, ssh, or natd for ipfw from ports, but it's also somehow part of the base system, for a bit similar reason, I think so. >=20 > --=20 > /"\ Best regards, | mlaier@freebsd.org > \ / Max Laier | ICQ #67774661 > X http://pf4freebsd.love2party.net/ | mlaier@EFnet > / \ ASCII Ribbon Campaign | Against HTML Mail and News Bye, Gergely Czuczy mailto: gergely.czuczy@harmless.hu --=20 Weenies test. Geniuses solve problems that arise. --0OAP2g/MAC+5xKAE Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (FreeBSD) owF1Vb9vI0UUDjkhpJVAuhZRPIFELoq9tuPYDj4lucTJcUYJCSSQ+wXSePetd8ju zDIza2dPVyGEKCgQFRIFiIYKiYKGho6GAgQl4k+gAR006BBvZuPYdxybIt6Z9773 ve97O/Phkxfm5i/+8NXXt5Y++OiTx758ojZYSnNjxLCaMjXiotqo1xvVZqvdaFTb 1dZKC8MXsNNsdlrNdtC6Gjz1e08Kg8JUj4oMu2Dw1NSyhHFxGYKYKY1mLTdRddWb xG1znUnNDZeiC1wkXOD53pFiQkeoqjsikCEXwy68nUuDYTVTXBg2SNDz9gUc5qIC L+UC6s0KLNfrHWAG6qvd1nK33jzYg6U6LVZgj53CLuOoYKwIpeutQ5kcsoJSLQK6 9Aq8iGqISQG9m6/1bt6Yxk8y/luu0eiuNLuNuiu3asvt9uE6F7O564+iYP9u+b7/ Rvn7bGUdrskxhBIylFmCECEmwAYyN6AwlWTFECKTkRDytIBIyRRMjDBgGs8RWGLk EGlZbQD0aZ+LE+BmQcMAjSEOMopIcsikMhqYKMas8AH2My7IDb3hTej0YSzzJIQR UYZIKkoKktwaAhmROIVLtrbAMWGOUGnKtrj7GYqtw+1F4FwFvkPaTFKpDTAokClg Qwn9hRFCykIkArYj0EiDFiCMiTe6pmg1hDHT8BbjCYZgpMNikMiAJdA/ABaGCrWu EEYIHGJmgyDXOKsR8SYJNNArTRz6cERvDkmhZY1loO1Km5ykCWzTYsGQXMCCmI+o 9pibeELqDJgLB2Klr4CWD9a3oQkzU2Eq1BgPYorRblOwFEsVHQrJZldLS4xCotlf mFFeIX1NwYPuO04OgkReW67buT5hRQUGNC3juLDuu2LKilwQBtPkUCFzCJjtzxI9 M9KJdOZlCTUxVEbTkovTiZsypTLHcUEzi3qGXMzIXxJjgGteCUgtWq02vC0MmC3t RlLLFGMa+YwpY2tlkQ+voyrIZDIrOetmsstNaR9w15hHkwsuO7q0slhSsOSMYsGJ FYtS7HvIDCNbhcDAHjg09FrLgJM/pbOeDaJ9o2QyG1f6amkSWujoTYl43jGWswI0 R8KpGeg8oyQdV4AUFcyE5XeTReNSOieb68lzuCyhCg9rMPmiQRfaYFpxGAwG3IDm KU+Y8kovK+eft5bE52wIqtXyf+3Z2wBbqO3RMWQqpLqPfO5Cmtiz6UpEbg506Es1 pPTbUIOZg+t/n7vQ770Cz7U7nc5Ku92gTLhOy7ExWbdWy6KVCWwiR7hseyx8gaY2 U3jnKi1YxlQUNg97/T68ygcDmr4eSzPGh+LhkptDuluos2tHe7tEkifuCHgZx9qj Z6vAiuedH+Z38uBO4aUUZWQXhuWyH7jlK3Q7pQkdIn6ce14p3TGi4HaUSDuf7gTB yVs7qgnNNI033T+pHTQ6/pnidKR4729ceHzOXoOTO/Ti/K/vzX328Zv3fjq5/rT6 5/vP7//84+Ez9+5vXp77dDv74rvn53/75vTPP/7+9t1f9g/+emfnXw== =9GRi -----END PGP SIGNATURE----- --0OAP2g/MAC+5xKAE--