Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# If we have to: ftp-proxy with redirection

In the base system, load the daemon if you need it

`/etc/rc.conf[.local]`

    ftpproxy_flags=""

`/etc/pf.conf`

NAT section anchors

    nat-anchor "ftp-proxy/*"
    rdr-anchor "ftp-proxy/*"

the redirection

    rdr pass on $int_if proto tcp from any to any port ftp -> 127.0.0.1 \
             port 8021

in your filtering section

    anchor "ftp-proxy/*"

    pass out proto tcp from $proxy to any port 21 keep state