ftp-proxy headaches

[Andy Maslar <andy@maslar.net>]

Hello All,

I am using openbsd 3.0 for firewall/nat in front of my lan, and have 
configured ftp-proxy as indicated in the man pages. This was all working 
great until a few days ago. Now, I can't get an ftp client to get past the 
initial connection. The status message I'm getting is "Socket connected. 
Waiting for welcome message." It hangs at that point until I kill it. I 
have not changed anything on the openbsd box, nor on my client. The 
settings on the ftp client do not seem to affect anything, whether I set it 
to active or passive, or turn proxy use on or off. I had been using active 
mode with proxy with no problems.

I also turned on tcpdump to monitor pflog, but nothing was being blocked, 
so I don't think the problem is in pf.conf. Just to be sure, I reset 
pf.conf to pass in/out all, but this did not help.

I believe the problem is in ftp-proxy somewhere because I temporarily 
configured my client machine with an outside ip address (bypassing openbsd) 
and ftp worked fine.

If anyone has a suggestion about what might be wrong, please email to me 
directly as I am not on the openbsd mailing list.

Thanks very much.

-Andy