Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Feb 2001 00:25:55 -0600
From:      "Thomas T. Veldhouse" <veldy@veldy.net>
To:        <freebsd-stable@freebsd.org>
Subject:   IPFilter 3.4.16? ftp-proxy and bimap broken on 3.4.8?
Message-ID:  <000f01c08ce0$ff8abfe0$0100a8c0@cascade>

next in thread | raw e-mail | index | archive | help
Can anybody lead me to a method of installing ipfilter 3.4.16 onto a FreeBSD
4.2-STABLE (02012000) machine?  I am having trouble with 3.4.8 that comes
standard with FreeBSD.  It seems that the ftp-data port is not properly
handled during ftp proxy and bimap does not seem to work either.  It seems
to translate outgoing packets OK, but incoming packets (setup) do not ever
reach the internal machines.  The ftp-proxy seems to fail no matter whether
I run nat using bimap or map the entire address range to one IP address.

Here are the options I am using in /etc/ipnat.rules:

--
# allow transparent proxy of ftp
map dc1 0.0.0.0/0 -> 0/32 proxy port 21 ftp/tcp

# run nat for our internal network
#map dc1 192.168.0.0/24 -> 0/32 portmap tcp/udp 30000:50000
bimap dc1 192.168.0.1/32 -> xx.xx.xx.xx/32
bimap dc1 192.168.0.2/32 -> yy.yy.yy.yy/32
bimap dc1 192.168.0.4/32 -> zz.zz.zz.zz/32
--

Thanks in advance,

Tom Veldhouse
veldy@veldy.net




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000f01c08ce0$ff8abfe0$0100a8c0>