From owner-freebsd-questions Tue May 25 16:26:49 1999 Delivered-To: freebsd-questions@freebsd.org Received: from megamail.megared.net.mx (www.megacable.com.mx [207.249.163.2]) by hub.freebsd.org (Postfix) with SMTP id 3FAA914C40 for ; Tue, 25 May 1999 16:26:40 -0700 (PDT) (envelope-from ales@megared.net.mx) Received: from [207.249.163.249] by megamail.megared.net.mx (NTMail 3.03.0017/4c.ab3r) with ESMTP id sa243326 for ; Tue, 25 May 1999 18:23:54 -0500 Message-ID: <008901bea705$bd815f40$f9a3f9cf@megared.net.mx> From: =?iso-8859-1?Q?Alejandro_Ram=EDrez?= To: "Ed Keith" Cc: "freebsd-questions" Subject: RE: which ftp proxy? Date: Tue, 25 May 1999 18:24:30 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0086_01BEA6DB.D46FD4E0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2014.211 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2014.211 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_0086_01BEA6DB.D46FD4E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, You should try to enable natd, it will do what you want, and its = better than having a proxy server, anyway in one case or another, you will be routing packets fron one interface to another, you can=B4t avoid that, enabling natd its very simple, just set these lines in the /etc/rc.conf file: gateway_enable=3D"YES" # Set to YES if this host will be a = gateway. natd_enable=3D"YES" # Enable natd (if firewall_enable = =3D=3D YES). natd_interface=3D"fxp0" # Public interface to use with natd = (it=B4s your outside interface). natd_flags=3D"" # Additional flags for natd = (see "man natd"). Ales ----- Original Message ----- From: Ed Keith To: Alejandro Ram=EDrez Cc: freebsd-questions Sent: Tuesday, May 25, 1999 2:18 PM Subject: Re: which ftp proxy? > No packets get through the firewall. The firewall system is dual = homed. No > packets are routed between the two addresses. (The internal network is > 192.168.19.x, so it would be very bad if packets were routed.) > If I want to ftp out I need to log onto the firewall machine and ftp = from there > then ftp again (using an ftp server on the firewall that only connects = to the > inside network) from the firewall to my desktop. > > -EdK > > Alejandro Ram=EDrez wrote: > > > Hi, > > > > If you are behind a firewall, and the ports: > > > > ftp-data 20/tcp #File Transfer [Default Data] > > ftp-data 20/udp #File Transfer [Default Data] > > ftp 21/tcp #File Transfer [Control] > > ftp 21/udp #File Transfer [Control] > > > > aren=B4t specifically blocked out by your system administrator (that = i don=B4t > > think they are), you must use the "passive" mode in ftp transfers, = the > > "passive" mode must be used always that you are behind a firewall, = this is a > > rule to have a good ftp session, if your system administrator did > > specifically blocked out this ports, you may ask him to unblock them = out (in > > /etc/rc.firewall), since this is simpler than to install a proxy = server. And > > if you want to have more security in your network, and you have = already > > configured ipfw, then you may try to enable "natd" (network address > > translation), it will let you have private ip addresses in your = network and > > go outside with a public address for all of your machines (instead = of > > installing a proxy server) but you still will have to use the = "passive" mode > > in ftp transfers. > > > > Ales > > > > ----- Original Message ----- > > From: Ed Keith > > To: Alejandro Ram=EDrez > > Cc: freebsd-questions > > Sent: Monday, May 24, 1999 11:29 PM > > Subject: Re: which ftp proxy? > > > > > I don't think that will help since all packets are blocked by the > > firewall. > > > I think I need to use a proxy server. But I don't know which one = would be > > > best for my needs. (very small network, light volume, newbe site admin., > > > paranoid domain administrator who may want me to justify why I = picked the > > one > > > decide to use.) > > > > > > -EdK > > > > > > > > > Alejandro Ram=EDrez wrote: > > > > > > > Hi, > > > > > > > > Try the "passive" option in the ftp program. > > > > > > > > Ales > > > > > > > > ----- Original Message ----- > > > > From: Ed Keith > > > > To: freebsd-questions > > > > Sent: Sunday, May 23, 1999 6:14 PM > > > > Subject: which ftp proxy? > > > > > > > > > I'm running FreeBSD 2.28 and ipfw. I want to install an ftp = proxy so I > > > > > can connect to ftp sites from behind the firewall. What is > > recommended? > > > > > > > > > > Thanks in advance, > > > > > -EdK > > > > > > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > > with "unsubscribe freebsd-questions" in the body of the = message > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > with "unsubscribe freebsd-questions" in the body of the message > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message ------=_NextPart_000_0086_01BEA6DB.D46FD4E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi,

    You = should try to=20 enable natd, it will do what you want, and its better
than having a = proxy=20 server, anyway in one case or another, you will be
routing packets = fron one=20 interface to another, you can=B4t avoid that,
enabling natd its very = simple,=20 just set these lines in the=20 /etc/rc.conf
file:

gateway_enable=3D"YES"   &nbs= p;      =20 # Set to YES if this host will be a=20 gateway.
natd_enable=3D"YES"       =          =20 # Enable natd (if firewall_enable =3D=3D=20 YES).
natd_interface=3D"fxp0"       = ;      =20 # Public interface to use with natd (it=B4s
your outside=20 interface).
natd_flags=3D""       &= nbsp;           &n= bsp;      =20 # Additional flags for natd (see
"man = natd").

Ales

-----=20 Original Message -----
From: Ed Keith <edk@kew.com>
To: Alejandro = Ram=EDrez <ales@megared.net.mx>
Cc:=20 freebsd-questions <freebsd-questions@FreeBSD.O= RG>
Sent:=20 Tuesday, May 25, 1999 2:18 PM
Subject: Re: which ftp = proxy?


>=20 No packets get through the firewall. The firewall system is dual homed.=20 No
> packets are routed between the two addresses. (The internal = network=20 is
> 192.168.19.x, so it would be very bad if packets were=20 routed.)
> If I want to ftp out I need to log onto the firewall = machine=20 and ftp from
there
> then ftp again (using an ftp server on the = firewall that only connects to
the
> inside network) from the = firewall=20 to my desktop.
>
>     = -EdK
>
>=20 Alejandro Ram=EDrez wrote:
>
> > Hi,
> >
> = > If=20 you are behind a firewall, and the ports:
> >
> >=20 ftp-data        =20 20/tcp    #File Transfer [Default Data]
> >=20 ftp-data        =20 20/udp    #File Transfer [Default Data]
> >=20 ftp           &nbs= p; =20 21/tcp    #File Transfer [Control]
> >=20 ftp           &nbs= p; =20 21/udp    #File Transfer [Control]
> >
> = >=20 aren=B4t specifically blocked out by your system administrator (that=20 i
don=B4t
> > think they are), you must use the "passive" = mode in ftp=20 transfers, the
> > "passive" mode must be used always that you = are=20 behind a firewall, this
is a
> > rule to have a good ftp = session, if=20 your system administrator did
> > specifically blocked out this = ports,=20 you may ask him to unblock them out
(in
> > = /etc/rc.firewall), since=20 this is simpler than to install a proxy server.
And
> > if = you want=20 to have more security in your network, and you have already
> > = configured ipfw, then you may try to enable "natd" (network = address
> >=20 translation), it will let you have private ip addresses in your=20 network
and
> > go outside with a public address for all of = your=20 machines (instead of
> > installing a proxy server) but you = still will=20 have to use the "passive"
mode
> > in ftp transfers.
> = >
> > Ales
> >
> > ----- Original Message=20 -----
> > From: Ed Keith <edk@kew.com>
> > To: = Alejandro Ram=EDrez=20 <ales@megared.net.mx>
>=20 > Cc: freebsd-questions <freebsd-questions@FreeBSD.O= RG>
>=20 > Sent: Monday, May 24, 1999 11:29 PM
> > Subject: Re: which = ftp=20 proxy?
> >
> > > I don't  think that will help = since=20 all packets are blocked by the
> > firewall.
> > > = I think=20 I need to use a proxy server. But I don't know which one = would
be
>=20 > > best for my needs. (very small network, light volume, newbe=20 site
admin.,
> > > paranoid domain administrator who may = want me=20 to justify why I picked
the
> > one
> > > decide = to=20 use.)
> > >
> > >     = -EdK
>=20 > >
> > >
> > > Alejandro Ram=EDrez = wrote:
>=20 > >
> > > > Hi,
> > > >
> > = >=20 >     Try the "passive" option in the ftp=20 program.
> > > >
> > > > Ales
> > = >=20 >
> > > > ----- Original Message -----
> > = > >=20 From: Ed Keith <edk@kew.com>
> >=20 > > To: freebsd-questions <freebsd-questions@FreeBSD.O= RG>
>=20 > > > Sent: Sunday, May 23, 1999 6:14 PM
> > > > = Subject: which ftp proxy?
> > > >
> > > > = > I'm=20 running FreeBSD 2.28 and ipfw. I want to install an ftp proxy
so = I
>=20 > > > > can connect to ftp sites from behind the firewall. = What=20 is
> > recommended?
> > > > >
> > = > >=20 > Thanks in advance,
> > > > = >    =20 -EdK
> > > > >
> > > > >
> = > >=20 > >
> > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> = > >=20 > > with "unsubscribe freebsd-questions" in the body of the=20 message
> > > >
> > > > To Unsubscribe: = send mail=20 to majordomo@FreeBSD.org
> = >=20 > > with "unsubscribe freebsd-questions" in the body of the=20 message
> > >
>
>
>
> To = Unsubscribe: send=20 mail to majordomo@FreeBSD.org
>=20 with "unsubscribe freebsd-questions" in the body of the=20 message
------=_NextPart_000_0086_01BEA6DB.D46FD4E0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message