Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Dec 2004 02:55:07 +0100
From:      Didier Wiroth <didier.wiroth@mcesr.etat.lu>
To:        freebsd-pf@freebsd.org
Subject:   pfS ftp-proxy binding to 127.0.0.1
Message-ID:  <8e3f9722ef1.41c8e20b@etat.lu>

next in thread | raw e-mail | index | archive | help
HI,
I'm still trying openbsd and freebsd.

I'm setting a pppoe router , using pf and ftp-proxy.
On openbsd you can bind ftp-proxy to the localhost address, openbsd's ftp-proxy only listens to 127.0.0.1 like this:
127.0.0.1:8021

On freebsd it listens on all ip addresses, here is the result of sockstat:
root     inetd      750   4  tcp4   *:8021                *:*

 I do understand that I can explicitly add a pf rule to deny or  allow access to the proxy but to enforce security  is it possible to bind ftp-proxy so that it only listens to the localhost.

thx
didier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8e3f9722ef1.41c8e20b>