Re: ftp-proxy binat design -- Was: Re: binat questions

2007-07-02 Thread Karl O. Pinc
On 07/01/2007 12:53:59 PM, Camiel Dobbelaar wrote: On Sun, 1 Jul 2007, Karl O. Pinc wrote: > The basic idea is to modify ftp-proxy so it adds binat > rules to it's anchors. You cannot use port in binat rules, so that would not work. I think this problem can only be fixed in pf itself,

Re: ftp-proxy binat design -- Was: Re: binat questions

2007-07-01 Thread Camiel Dobbelaar
On Sun, 1 Jul 2007, Karl O. Pinc wrote: > On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: > > > One thing to watch out for with binat: you can't use it with > > ftp-proxy(8), since binat is of higher priority than the rdr or > > nat rules which are added to the anchor. The workaround there > >

ftp-proxy binat design -- Was: Re: binat questions

2007-06-30 Thread Karl O. Pinc
On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: One thing to watch out for with binat: you can't use it with ftp-proxy(8), since binat is of higher priority than the rdr or nat rules which are added to the anchor. The workaround there is to list nat and rdr separately. I just figured this o