OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bob Beck (beckcvs.openbsd.org)
Date: Sat Aug 18 2001 - 23:11:12 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    CVSROOT: /cvs
    Module name: src
    Changes by: beckcvs.openbsd.org 2001/08/18 22:11:12

    Added files:
            libexec/ftp-proxy: Makefile ftp-proxy.8 ftp-proxy.c getline.c
                               util.c util.h

    Log message:
    transparent ftp proxy, based on Obtuse Systems juniper stuff with much
    modernizing and cleanup. still needs looking at.

    Currently supports PORT PASV EPRT data connections with only a pf rdr to
    capture the control connection. (I.E. you don't need ip forwarding
    or other NAT stuff). Runs from inetd.

    Supports all passive (EPSV PASV) when using -n flag, where the proxy
    ignores passive mode data connections (and assumes nat will get them
    through).

    Todo yet:
    More audit
    IpV6
    Handle EPSV in proxy (with an rdr added then removed)
    Option to Daemonize and bind only to the loopback
    More Content/Login filtering, etc. etc. and more bloat