transparent ftp proxy, based on Obtuse Systems juniper stuff with much

modernizing and cleanup. still needs looking at.

Currently supports PORT PASV EPRT data connections with only a pf rdr to
capture the control connection. (I.E. you don't need ip forwarding
or other NAT stuff). Runs from inetd.

Supports all passive (EPSV PASV) when using -n flag, where the proxy
ignores passive mode data connections (and assumes nat will get them
through).

Todo yet:
	More audit
	IpV6
	Handle EPSV in proxy (with an rdr added then removed)
	Option to Daemonize and bind only to the loopback
	More Content/Login filtering, etc. etc. and more bloat

1 files changed, 14 insertions, 0 deletions

diff --git a/libexec/ftp-proxy/Makefile b/libexec/ftp-proxy/Makefile
new file mode 100644
index 00000000000..d03a20324cd
--- /dev/null
+++ b/libexec/ftp-proxy/Makefile
@@ -0,0 +1,14 @@
+#	$OpenBSD: Makefile,v 1.1 2001/08/19 04:11:11 beck Exp $
+#	@(#)Makefile	8.2 (Berkeley) 4/4/94
+
+PROG=	ftp-proxy
+CFLAGS+=-Wall -Werror
+SRCS=	ftp-proxy.c getline.c util.c 
+MAN=	ftp-proxy.8
+
+.include <bsd.own.mk>
+
+LDADD+=	-lwrap
+DPADD+=	${LIBWRAP}
+
+.include <bsd.prog.mk>