diff options
| author | Jason McIntyre <jmc@cvs.openbsd.org> | 2005-11-20 10:01:31 +0000 |
|---|---|---|
| committer | Jason McIntyre <jmc@cvs.openbsd.org> | 2005-11-20 10:01:31 +0000 |
| commit | dd01702487261c3b0e0c6ffb108517896e0a11ad (patch) | |
| tree | bb5fcd26bff0267d02a9bd392512274d95ecc7c0 /usr.sbin/ftp-proxy/ftp-proxy.8 | |
| parent | aecb61b9998434b96dbc54afdef9a7ebb442e331 (diff) | |
.Sh SECURITY -> .Sh CAVEATS
ok camield@
Diffstat (limited to 'usr.sbin/ftp-proxy/ftp-proxy.8')
| -rw-r--r-- | usr.sbin/ftp-proxy/ftp-proxy.8 | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/usr.sbin/ftp-proxy/ftp-proxy.8 b/usr.sbin/ftp-proxy/ftp-proxy.8 index 5c6349cf5a6..1f4c2d12380 100644 --- a/usr.sbin/ftp-proxy/ftp-proxy.8 +++ b/usr.sbin/ftp-proxy/ftp-proxy.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ftp-proxy.8,v 1.3 2005/06/07 04:37:32 camield Exp $ +.\" $OpenBSD: ftp-proxy.8,v 1.4 2005/11/20 10:01:30 jmc Exp $ .\" .\" Copyright (c) 2004, 2005 Camiel Dobbelaar, <cd@sentia.nl> .\" @@ -159,7 +159,11 @@ In the rule section: anchor "ftp-proxy/*" pass out proto tcp from $proxy to any port 21 keep state .Ed -.Sh SECURITY +.Sh SEE ALSO +.Xr ftp 1 , +.Xr pf 4 , +.Xr pf.conf 5 +.Sh CAVEATS Negotiated data connection ports below 1024 are not allowed. .Pp The negotiated IP address for active modes is ignored for security @@ -168,7 +172,3 @@ This makes third party file transfers impossible. .Pp .Nm ftp-proxy chroots to "/var/empty" and changes to user "proxy" to drop privileges. -.Sh SEE ALSO -.Xr ftp 1 , -.Xr pf 4 , -.Xr pf.conf 5 |