FreeBSD 10 + reverse ftp-proxy
Adrian Huryn
ahuryn at i-pi.pl
Fri Feb 6 19:55:31 UTC 2015
Hello.
I search little @google for this problem but i can't find any good
solution for it.
I have 2 pureftpd servers in my DMZ.
FTP 1
INTERNET > 212.12.12.1:2121 > 192.168.34.12:2121
FTP 2
INTERNET > 212.12.12.2:2121 > 192.168.34.19:2121
And i try to set reverse proxy for it, i add to my pf.conf
anchor "ftp-proxy/*"
pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port 2121
flags S/SAFR modulate state divert-to lo0 port 9021
pass in log 212.12.12.2 inet proto tcp from any to 212.12.12.2 port 2121
flags S/SAFR modulate state divert-to lo0 port 9022
And i run 2 x ftp-proxy
ftp-proxy -p 9021 -R 192.168.34.12 -P 2121 -D7 -v
ftp-proxy -p 9022 -R 192.168.34.19 -P 2121 -D7 -v
But when i try to check pf.conf syntax i got this error :
/etc/pf.conf:106: syntax error
106: pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port
2121 flags S/SAFR modulate state divert-to lo0 port 9021
My uname -a :
FreeBSD cerber 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11
21:02:49 UTC 2014
root at releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64
Thanks for help.
Best regards.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: pubkey.asc
URL: <http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20150206/3f93b7cb/attachment.asc>
More information about the freebsd-pf
mailing list