diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2011-05-12 18:36:08 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2011-05-12 18:36:08 +0000 |
| commit | 01ebc3d1b3fabf9b92630cc5768886965635c5fc (patch) | |
| tree | 41315e784943c12884729468fc0e6435621c258d /usr.sbin | |
| parent | 4be7f02f55dd478dadca7a19fa827a45221fbfb7 (diff) | |
Make it clear that ftp-proxy needs to make outbound connections.
ok claudio
Diffstat (limited to 'usr.sbin')
| -rw-r--r-- | usr.sbin/ftp-proxy/ftp-proxy.8 | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/usr.sbin/ftp-proxy/ftp-proxy.8 b/usr.sbin/ftp-proxy/ftp-proxy.8 index 9b0c8fc3e29..74bf11f92df 100644 --- a/usr.sbin/ftp-proxy/ftp-proxy.8 +++ b/usr.sbin/ftp-proxy/ftp-proxy.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ftp-proxy.8,v 1.16 2011/04/28 00:21:33 mikeb Exp $ +.\" $OpenBSD: ftp-proxy.8,v 1.17 2011/05/12 18:36:07 mcbride Exp $ .\" .\" Copyright (c) 2004, 2005 Camiel Dobbelaar, <cd@sentia.nl> .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: April 28 2011 $ +.Dd $Mdocdate: May 12 2011 $ .Dt FTP-PROXY 8 .Os .Sh NAME @@ -166,10 +166,13 @@ The pf rules do not log by default. To make use of the proxy, .Xr pf.conf 5 needs the following rules. -Adjust the rules as needed. +Adjust the rules as needed; depending on the rest of your ruleset the +last rule explicitly allowing ftp sessions from the proxy may not be +necessary. .Bd -literal -offset 2n anchor "ftp-proxy/*" pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021 +pass out inet proto tcp from (self) to any port ftp .Ed .Sh SEE ALSO .Xr ftp 1 , |