"stuart van Zee" <[EMAIL PROTECTED]> writes:

> A point in the right direction would be appreciated.  I tried
> looking up on google, but I found a bazillion hits on how to setup a
> firewall on a network and still being able to reach an ftp server on
> the internet from the network, but nothing on how to do it the other
> way around where the FTP server is behind the firewall.  

That's probably due to the fact that there's a lot more people who
need to access ftp servers elsewhere than people who need to run ftp
servers.  ftp-proxy has its reverse mode ( -R ) for that purpose.  I'm
not convinced it's possible to run the proxy in any useful way on the
bridge itself, though.  The proxy needs to bind to an interface with
an IP address, which is sort of a scarce commodity on a transparent
bridge.

Then again, you can probably set up your ftp server to behave
predictably (limit its port range) and craft a bridge rule set with
just enough holes in it to let your traffic through.  See eg
http://www.openbsd.org/faq/pf/ftp.html#server for a starting point.

- P
-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Reply via email to