Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 8 Jul 2006 12:32:13 +0400
From:      "Dmitry Andrianov" <dimas@dataart.com>
To:        <freebsd-pf@freebsd.org>
Subject:   proxies
Message-ID:  <D5972F49810A69449A9EA72A4B360DC2D0A385@e1.universe.dart.spb>

next in thread | raw e-mail | index | archive | help
Hello.
=20
On Linux there are conntrack "modules" for many protocols available
which:
1. identify related connections and let them go through firewall (like
FTP data is related to FTP control)
2. Let things work through NAT - translate addresses in the FTP control
connections, identify different PPTP connections even if they go to the
same endpoint etc
=20
So the question is: does pf have anything similar? I'm most interested
in FTP, RPC and establishing multiple PPTP connections through NAT to
the same endpoint.
=20
Currently I use ftpsesame for FTP - it does its job great but it is FTP
specific solution obviously, RPC would requirs another application
listening for traffic (bpf) and changing firewall. Is there a more clean
way?
=20
Regards,
Dmitry Andrianov
=20



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?D5972F49810A69449A9EA72A4B360DC2D0A385>