OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Stefan Sczekalla (Stefan.Sczekalla_at_gkk.de)
Date: Tue Aug 06 2002 - 10:23:29 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi,

    I still have some problems to get the ftpproxy setup working.

    my Configs looks like below:

    "A" is the machine where the pf and proxy is running
    "A_Net" is the network wher "A" and some other machines are running

    inetd.conf:
    "A":8081 stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy
    -n -V -D 3 -u nobody -m 55000 -M 57000 -t 300

    nat.conf
    rdr on ep1 from any to any port 21 -> "A" port 8081

    pf.conf
    # FTP
    pass in on ep0 proto tcp from any to any port = 21 keep state
    pass out on ep0 proto tcp from any to "A" port 54999 >< 57001 keep state
    pass out on ep0 proto tcp from "A" port = 20 to any keep state

    1.)
    from a net outside "A_Net" I can connect to a MS_FTP-Server and log in,
    but a "ls" results in a "500 'EPSV': command not understood"
                 "227 Entering Passive Mode (ftp-IP-Adress in A_Net).
    after some rather long time I get "200 Port command sucessful" and "150
    Opening ASCII mode data connection for file list"
    ... ( still waiting for a file-list )

                             
    2.)
    from A_Net I can't establish a ftp-connetion.

    Now I'm confused as I expected the above setup to rdr every ftp-connection
    no question where It comes from to be ftp-proxyed.

    Kind regards,

            Stefan