OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Claudio Jeker (claudiocvs.openbsd.org)
Date: Tue Sep 01 2009 - 08:46:14 CDT


CVSROOT: /cvs
Module name: src
Changes by: claudiocvs.openbsd.org 2009/09/01 07:46:14

Modified files:
        usr.sbin/ftp-proxy: filter.c filter.h ftp-proxy.c

Log message:
Bring ftp-proxy in sync with the massive pf change just commited by Henning.
This changes the way the rdr/nat rules are added to pf. Now only a single
anchor is needed (the other ones do no longer exist).
To convert your ruleset you need something like this at the start of your
ruleset:
# filter rules and anchors for ftp-proxy(8)
anchor "ftp-proxy/*"
pass in quick proto tcp to port ftp rdr-to 127.0.0.1 port 8021

This was tested by myself, sthen, dlg and I think many more. OK by the same
people plus henning.