From owner-freebsd-hackers  Sat Mar  1 12:34:36 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id MAA28164
          for hackers-outgoing; Sat, 1 Mar 1997 12:34:36 -0800 (PST)
Received: from ns.ge.com (ns.ge.com [192.35.39.24])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA28158
          for <freebsd-hackers@freebsd.org>; Sat, 1 Mar 1997 12:34:33 -0800 (PST)
Received: from thomas.ge.com (thomas.ge.com [3.47.28.21]) by ns.ge.com (8.8.4/8.7.3) with ESMTP id PAA19387 for <freebsd-hackers@freebsd.org>; Sat, 1 Mar 1997 15:32:28 -0500 (EST)
Received: from burg.is.ge.com (burg.is.ge.com [3.19.120.24]) by thomas.ge.com (8.8.4/8.7.5) with ESMTP id PAA17703 for <freebsd-hackers@freebsd.org>; Sat, 1 Mar 1997 15:35:21 -0500 (EST)
Received: (from burg@localhost)
          by burg.is.ge.com (8.8.4/8.8.4)
	  id VAA20143; Sat, 1 Mar 1997 21:27:13 +0100 (MET)
Date: Sat, 1 Mar 1997 21:27:13 +0100 (MET)
Message-Id: <199703012027.VAA20143@burg.is.ge.com>
From: Dick van den Burg <burg@is.ge.com>
To: freebsd-hackers@freebsd.org
Subject: cvsup
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

I am trying to get cvsup to run through a TIS firewall.

This firewall supports a plug-gw, where a connection from a host to a
port can be accepted from one side of the firwall and re-established
to another host at the other side:

my-host:xxxx  -> firewall:5999 -> firewall:xxx -> cvsup.freebsd:5999  

I had set up a rule to allow

cvsup.freebsd.org:xxx -> firewall:5998 -> firewall:xxx -> my-host:5998

and I called cvsup -P 5998

Unfortunately the PORT command sent by cvsup has 'my-host' IP address
and port 5998 in there, so cvsup.freebsd tries to connect there, and
of course my-host is unknown on the internet.

Passive mode does not work because it will connect to a port that can
be different with each invocation and I need to instruct the plug-gw
which ports to connect to.

Is there any way whereby I can tell the server to connect to the
firewall (in stead of my-host) on a given port or is there any way I
can specify a portnumber I can connect to on the server in passive
mode? 

Any other suggestions ?

Thanks,
Dick van den Burg