On Thu, 8 Jun 2006, sheda wrote: > There's a NAT box between the OpenBSD box and Internet, that's why I don't > need outgoing NAT rules.
Then the ftp-proxy needs to run on the NAT box, because the private space address is used _inside_ the FTP protocol as well (in active mode). For bridges "ftpsesame" may be what you're looking for: http://www.sentia.org/projects/ftpsesame -- Cam