ftpsesame helps the FTP protocol get through your pf(4) firewall. It does this by passively analysing FTP control connections and adding rules into a pf(4) anchor when an FTP data connection is about to commence. You might want to try ftpsesame instead of ftp-proxy(8) for the following reasons: * it runs on "transparent" (no IP address) bridges * you need packetfilter performance on all data connections * you have to handle lots of simultaneous sessions * you do not want to redirect any traffic to the firewall itself: for IP accounting or other reasons In general, ftpsesame is a good choice to run on a firewall in front of multiple FTP servers, where no NAT is involved. ftp-proxy(8) is usually the best choice when users behind NAT need to access FTP servers on the Internet. In other situations it depends, sometimes they are useful together. Works with security/pflkm and on OpenBSD 3.6. |
||
---|---|---|
.. | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile | ||
PLIST |