From owner-freebsd-pf@FreeBSD.ORG Tue Jan 24 10:55:54 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DCF6116A41F for ; Tue, 24 Jan 2006 10:55:54 +0000 (GMT) (envelope-from nejko@skoberne.net) Received: from svarun.infrax.si (svarun.infrax.si [193.77.158.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5D6A743D72 for ; Tue, 24 Jan 2006 10:55:46 +0000 (GMT) (envelope-from nejko@skoberne.net) Received: from localhost (localhost [127.0.0.1]) by svarun.infrax.si (Postfix) with ESMTP id 90249DA8A4 for ; Tue, 24 Jan 2006 11:55:44 +0100 (CET) Received: from svarun.infrax.si ([127.0.0.1]) by localhost (Svarun.infrax.si [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91793-10 for ; Tue, 24 Jan 2006 11:55:44 +0100 (CET) Received: by svarun.infrax.si (Postfix, from userid 80) id 4CAC5DA89B; Tue, 24 Jan 2006 11:55:44 +0100 (CET) Received: from 172.16.12.221 (172.16.12.221 [172.16.12.221]) by mail.infrax.si (Horde MIME library) with HTTP for ; Tue, 24 Jan 2006 11:55:44 +0100 Message-ID: <20060124115544.q3zmunj9m0og4g0g@mail.infrax.si> Date: Tue, 24 Jan 2006 11:55:44 +0100 From: nejko@skoberne.net To: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.0.3) / FreeBSD-5.3 Subject: Updating pf on FreeBSD X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jan 2006 10:55:55 -0000 Hi, I am running FreeBSD 5.3 and pf, and I have a problem because there's a Windows FTP server machine running behind NAT, on the local network. Of course, I want it to be accessible from the outside too. I have discovered pftpx, which is a proxy which does exactly what I want and is also ported to FreeBSD. Unfortunately, it doesn't work for me and I have learned that that's because it uses recursive (nested) anchors feature in the newer pf versions (from FreeBSD 5.4 on I think). So, I would need to upgrade the pf on my FreeBSD 5.3 to the at least 5.4's version. What would be the easiest and the most secure way to accomplish this? I guess I have to update pf's kernel part source and userland programs (pfctl)? How? Thank you in advance, Nejc Skoberne ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.