Hi How to use ftp-proxy ? (io-pkt-v4 6.4.0)
I'm not sure that I understand the question. I'm pretty sure that we don't have an ftp-proxy that ships with io-pkt. (Or is that the question?) Robert. -----Original Message----- From: Radosław Błajda [mailto:community-noreply@qnx.com] Sent: Sunday, November 09, 2008 8:51 AM To: general-networking Subject: How to use ftp-proxy Hi How to use ftp-proxy ? (io-pkt-v4 6.4.0) _______________________________________________ General http://community.qnx.com/sf/go/post16277
> I'm not sure that I understand the question. I'm pretty sure that we don't > have an ftp-proxy that ships with io-pkt. (Or is that the question?) > > Robert. > > -----Original Message----- > From: Radosław Błajda [mailto:community-noreply@qnx.com] > Sent: Sunday, November 09, 2008 8:51 AM > To: general-networking > Subject: How to use ftp-proxy > > Hi > > How to use ftp-proxy ? (io-pkt-v4 6.4.0) > > > > _______________________________________________ > General > http://community.qnx.com/sf/go/post16277 I would like to use QNX as a router, but i have a problem with NAT, being more precise with FTP sessions. I know that it is possible to do port 21 forwarding to FTP (It is written in the description pf.conf) Is there ftp - proxy available, or some sources at least? I have found something in core_networking, but i do not know how to compile it. I have also a second question concerning ALTQ/HFSC. In the description pf.conf it is written how to use it, but on every try there is an error : No ALTQ support In kernel, etc. How to run queing ??
Hmmmm... We don't currently have the support code in place for ftp-proxy. I believe that it's a separate daemon. I can see additional source in the NetBSD distribution here: http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/pf/usr.sbin/ftp-proxy/?only_with_tag=MAIN With regards to ALTQ, the currently released stack doesn't have support compiled in. We're targeting that for the next release in 2009. Robet. -----Original Message----- From: Radosław Błajda [mailto:community-noreply@qnx.com] Sent: Monday, November 10, 2008 12:27 PM To: general-networking Subject: Re: RE: How to use ftp-proxy > I'm not sure that I understand the question. I'm pretty sure that we > don't have an ftp-proxy that ships with io-pkt. (Or is that the > question?) > > Robert. > > -----Original Message----- > From: Radosław Błajda [mailto:community-noreply@qnx.com] > Sent: Sunday, November 09, 2008 8:51 AM > To: general-networking > Subject: How to use ftp-proxy > > Hi > > How to use ftp-proxy ? (io-pkt-v4 6.4.0) > > > > _______________________________________________ > General > http://community.qnx.com/sf/go/post16277 I would like to use QNX as a router, but i have a problem with NAT, being more precise with FTP sessions. I know that it is possible to do port 21 forwarding to FTP (It is written in the description pf.conf) Is there ftp - proxy available, or some sources at least? I have found something in core_networking, but i do not know how to compile it. I have also a second question concerning ALTQ/HFSC. In the description pf.conf it is written how to use it, but on every try there is an error : No ALTQ support In kernel, etc. How to run queing ?? _______________________________________________ General http://community.qnx.com/sf/go/post16317
Are the data, from sources io-pkt in location /trunk/dist/pf/libexec/ftp-proxy, used somwhere ?? Could it be compiled as an standalone program ? If i use io-net version 6. 3. 2. Does it have ftp-proxy builded - in ?
It appears that there also needs to be a separate daemon that runs along with that code. I THINK that the libexec stuff is built into pf, but you still need a userland application to get things going. That isn't in our source base (see http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/pf/usr.sbin/?only_with_tag=MAIN For what's in NetBSD). There is no ftp-proxy for io-net that I'm aware of. Is there any reason that it has to be FTP? Would OpenSSH's scp be better? FTP is inherently insecure... R. -----Original Message----- From: Radosław Błajda [mailto:community-noreply@qnx.com] Sent: Wednesday, November 12, 2008 8:44 AM To: general-networking Subject: Re: RE: RE: How to use ftp-proxy Are the data, from sources io-pkt in location /trunk/dist/pf/libexec/ftp-proxy, used somwhere ?? Could it be compiled as an standalone program ? If i use io-net version 6. 3. 2. Does it have ftp-proxy builded - in ? _______________________________________________ General http://community.qnx.com/sf/go/post16456
when I run for test io-net version 6.3.2 and I used command in /etc/ipnat.conf map en0 192.168.1.3/32 -> 81.210.62.178/32 proxy port ftp ftp/tcp map en0 192.168.1.3/32 -> 81.210.62.178/32 Then computer behind NAT (192.168.1.3) has full acces to FTP serwers from outside the network. I would like to get the same functionality in io-pkt version 6.4.0. Is it possible ? Computer with QNX has to function as a gateway (NAT) to the internet for dozens of computers.
I've done a bit of research into this and found that you definitely need ftp-proxy when using PF (but obviously not when using ipf, possibly because FTP is using the passive mode of operation and the ipf rules leave the port range open enough to enable this to work). I've looked into the NetBSD code base and they've re-arranged their code layout what it was. They've moved ftp-proxy from under dist/pf/libexec/ftp-proxy to dist/pf/usr.sbin (which is why I was getting confused). So the upshot of this is that the ftp-proxy code that has to be ported is under dist/pf/libexec/ftp-proxy in our source base. This code, when ported, will give you an ftp-proxy binary that you can run with the "-p" option (for PF) to provide the functionality that you need (as explained in the previous post). You don't need to compile the ipf.c file since it's a compile time option for ftp-proxy that's not needed. Robert. -----Original Message----- From: Radosław Błajda [mailto:community-noreply@qnx.com] Sent: Thursday, November 13, 2008 7:37 AM To: general-networking Subject: Re: RE: RE: RE: How to use ftp-proxy when I run for test io-net version 6.3.2 and I used command in /etc/ipnat.conf map en0 192.168.1.3/32 -> 81.210.62.178/32 proxy port ftp ftp/tcp map en0 192.168.1.3/32 -> 81.210.62.178/32 Then computer behind NAT (192.168.1.3) has full acces to FTP serwers from outside the network. I would like to get the same functionality in io-pkt version 6.4.0. Is it possible ? Computer with QNX has to function as a gateway (NAT) to the internet for dozens of computers. _______________________________________________ General http://community.qnx.com/sf/go/post16510
> Hi > > How to use ftp-proxy ? (io-pkt-v4 6.4.0) > Did you try http://www.ftpproxy.org/ ? PKY
