Re: ftp-proxy's inability to proxy using arbitrary source ip addresse s

[Richard Welty <rwelty@averillpark.net>]

On Sun, 10 Mar 2002 02:41:10 +0100 Daniel Hartmeier <daniel@benzedrine.cx> wrote:
> There's two issues with ftp-proxy in your case.

i think i'm the other person Adam refered to in his posting. my problem is
actually much simpler, and easily corrected now that i understand what is
going on. the gist of it from my point of view is that i had a firewall
answering at x.x.x.193 in x.x.x.192/27, and i had (somewhat arbitrarily)
decided to translate outbound nat-ed connections as appearing at x.x.x.211.
everything else worked, but not ftp-proxy. now that i understand this issue
with respect to ftp-proxy, i'll just change the nat rule to use x.x.x.193
and be happy.

my only suggestion is a documentation change -- probably somewhere in the
documentation for ftp-proxy and perhaps in section 6 of the OpenBSD FAQ,
this issue ought to be mentioned.

richard
--
Richard Welty                                         rwelty@averillpark.net
Averill Park Networking                                         518-573-7592
              Unix, Linux, IP Network Engineering, Security