redirect outbound packets originating from localhost to locally assign address (-> ftp-proxy)

Thread View: bit.listserv.openbsd-pf

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by twies Thu, 17 Jan 2013 07:33

#162

Author: twies
Date: Thu, 17 Jan 2013 07:33

29 lines
2444 bytes

Hello,

i'm new on this list, so please be patient with me. 
Anyway - I did my homework (at least i think so) but i'm stuck 
nevertheless. All man pages and docs i found seem to indicate that
what i want is impossible, but i hope, someone might have an idea...

I want to use ftp-proxy for outgoing client-requests. The main reason
for that is the automatic handling of pf rules that allow traffic
on the data connection without opening up the firewall to any ip/port 
for outbound traffic.

I'm unsing OpenBSD 5.0. I know, the ftp-proxy is purely transparent 
and is invoked by a divert-to rule. But

- divert-to is only allowed on inbound rules

- rdr-to is not supported on outbound rules, if the destination is
  a locally assigned address

So how can i get packets to port 21 that originate from the host 
itself processed by the ftp-proxy.

Background: I'm using squid on this host and i want it to serve 
ftp:// URLs via http. This usage doesnt seem to be unusual and
there might be a solution i didn't think of/find...

Thanks in advance
Thomas

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads