Re: Ftp server behind Openbsd

[Dries Schellekens <gwyllion@ace.ulyssis.org>]

On 4 Jun 2002, Daniel Martinez wrote:

> Hello,
> 	Anyone can do it works one nt ftp server behind an OpenBSD 3.0
>  with pf?
> I have one application what cant connect to server from the internet to
> the server what is nated by the firewall.
> I can do it a mistake moving the nt behind a firewall with a ftp server
> running?

Moving the ftp server behind a NAT is a big mistake, moving it behind your
firewall not. You should put the ftp server in your DMZ.

> Any recomendation is apreciated.

FTP sucks :-) But you can make active FTP work using ftp-proxy. I suggest
you read ftp-proxy(8) and "Using Active FTP Clients Through an OpenBSD 3.0
Firewall" (http://www.deadly.org/article.php3?sid=20020130012631, putting
a ftp server behind a NAT is similar ...)


Greetings,

Dries
-- 
Dries Schellekens
email: gwyllion@ulyssis.org