OpenBSD ftp-proxy behind NAT itself

Posted by Manuel Faux on Server Fault See other posts from Server Fault or by Manuel Faux
Published on 2012-11-18T16:44:05Z Indexed on 2012/11/18 17:03 UTC
Read the original article Hit count: 312

Filed under:
|

Is it possible to change the PASV IP ftp-proxy of OpenBSD sends to clients, without changing the listen address of redirection control (-b <address>)?

I have the following setup:

FTP client --> 1:1 NAT router --> OpenBSD router --> FTP server

The 1:1 NAT router has a NAT rule to forward everything to the OpenBSD router, the OpenBSD router runs the ftp-proxy -R <FTP server IP>. When the FTP client sends the PASV command, the proxy answers with the Entering Passive Mode (227) message with his own source IP on the interface to the 1:1 NAT router (obviously). Since the 1:1 NAT router is not protocol aware, it forwards this message and the client receives the message with the PASV IP of the OpenBSD router, which it does not have a route to.

Is there a way, that I can tell ftp-proxy to send the Entering Passive Mode message with a different source IP?

© Server Fault or respective owner

Related posts about ftp

Related posts about openbsd