This is a discussion on Re: [Fwbuilder-discussion] Re: Support for newer IPFilter proxies within the IPFilter forums, part of the System Security and Security Related category; > > I looked at the new proxies in 4.1.9. Is there any documentation on > > this ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
> > I looked at the new proxies in 4.1.9. Is there any documentation on
> > this stuff ? Their use is part of ipnat. > > All I could find was one-liner in the rpcbind proxy > > source code. All others come with no examples or description > > whatsoever, or so it seems. Did I miss it ? The rpcbind proxy shouldn't be supported. > > These proxies are not 100% obvious. For example, I thought one uses > > pptp proxy to handle pptp control connection (tcp port 1723), but > > what about GRE ? However, after looking at ip_pptp_pxy.c, it seems it > > is the other way around, that is this proxy handles GRE and not tcp > > 1723. The PPTP proxy follows the TCP connection and automatically allows through the right GRE packets. Use is like this: map pcn1 0/0 -> 0/0 proxy port 1723 pptp/tcp > > Do I need to make any changes to support ftp EPSV proxy ? No. > > At the > > first glance it seems the proxy itself has been modified to support > > EPSV and I do not need to make any changes as ipfilter command syntax > > for it remains the same. Correct. Darren |
![]() |
| Thread Tools | |
| Display Modes | |
|
|