TeamForge : Post

Forum Topic - How to use ftp-proxy: (9 Items)

View: as

Radosław Błajda(deleted)

11/09/2008 8:51 AM

post16277

Hi

How to use ftp-proxy ? (io-pkt-v4 6.4.0)

Robert Craig

RE: How to use ftp-proxy

Robert Craig

11/10/2008 10:31 AM

post16309

RE: How to use ftp-proxy

I'm not sure that I understand the question.  I'm pretty sure that we don't have an ftp-proxy that ships with io-pkt. 
(Or is that the question?)

	Robert.

-----Original Message-----
From: Radosław Błajda [mailto:community-noreply@qnx.com] 
Sent: Sunday, November 09, 2008 8:51 AM
To: general-networking
Subject: How to use ftp-proxy

Hi

How to use ftp-proxy ? (io-pkt-v4 6.4.0)

_______________________________________________
General
http://community.qnx.com/sf/go/post16277

Radosław Błajda(deleted)

11/10/2008 12:27 PM

post16317

Re: RE: How to use ftp-proxy

> I'm not sure that I understand the question.  I'm pretty sure that we don't 
> have an ftp-proxy that ships with io-pkt. (Or is that the question?)
> 
> 	Robert.
> 
> -----Original Message-----
> From: Radosław Błajda [mailto:community-noreply@qnx.com] 
> Sent: Sunday, November 09, 2008 8:51 AM
> To: general-networking
> Subject: How to use ftp-proxy
> 
> Hi
> 
> How to use ftp-proxy ? (io-pkt-v4 6.4.0)
> 
> 
> 
> _______________________________________________
> General
> http://community.qnx.com/sf/go/post16277




I would like to use QNX as a router, but i have a problem with NAT, being more precise with FTP sessions. I know that it
 is possible to do port 21 forwarding to FTP (It is written in the description pf.conf) Is there ftp - proxy available, 
or some sources at least? I have found something in core_networking, but i do not know how to compile it.


I have also a second question concerning ALTQ/HFSC. In the description pf.conf it is written how to use it, but on every
 try there is an error : No ALTQ support In kernel, etc. How to run queing ??

Robert Craig

11/10/2008 12:54 PM

post16322

RE: RE: How to use ftp-proxy

Hmmmm... We don't currently have the support code in place for ftp-proxy.  I believe that it's a separate daemon.  I can
 see additional source in the NetBSD distribution here:

http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/pf/usr.sbin/ftp-proxy/?only_with_tag=MAIN


With regards to ALTQ, the currently released stack doesn't have support compiled in.  We're targeting that for the next 
release in 2009.

   Robet.


-----Original Message-----
From: Radosław Błajda [mailto:community-noreply@qnx.com] 
Sent: Monday, November 10, 2008 12:27 PM
To: general-networking
Subject: Re: RE: How to use ftp-proxy

> I'm not sure that I understand the question.  I'm pretty sure that we 
> don't have an ftp-proxy that ships with io-pkt. (Or is that the 
> question?)
> 
> 	Robert.
> 
> -----Original Message-----
> From: Radosław Błajda [mailto:community-noreply@qnx.com]
> Sent: Sunday, November 09, 2008 8:51 AM
> To: general-networking
> Subject: How to use ftp-proxy
> 
> Hi
> 
> How to use ftp-proxy ? (io-pkt-v4 6.4.0)
> 
> 
> 
> _______________________________________________
> General
> http://community.qnx.com/sf/go/post16277




I would like to use QNX as a router, but i have a problem with NAT, being more precise with FTP sessions. I know that it
 is possible to do port 21 forwarding to FTP (It is written in the description pf.conf) Is there ftp - proxy available, 
or some sources at least? I have found something in core_networking, but i do not know how to compile it.


I have also a second question concerning ALTQ/HFSC. In the description pf.conf it is written how to use it, but on every
 try there is an error : No ALTQ support In kernel, etc. How to run queing ??



_______________________________________________
General
http://community.qnx.com/sf/go/post16317

Radosław Błajda(deleted)

11/12/2008 8:43 AM

post16456

Re: RE: RE: How to use ftp-proxy

Are the data, from sources io-pkt in location /trunk/dist/pf/libexec/ftp-proxy, used somwhere ??
Could it be compiled as an standalone program ?
If i use io-net version 6. 3. 2. Does it have ftp-proxy builded - in ?

Robert Craig

11/12/2008 10:18 AM

post16469

RE: RE: RE: How to use ftp-proxy

It appears that there also needs to be a separate daemon that runs along with that code.  I THINK that the libexec stuff
 is built into pf, but you still need a userland application to get things going.  That isn't in our source base (see
http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/pf/usr.sbin/?only_with_tag=MAIN

For what's in NetBSD).

There is no ftp-proxy for io-net that I'm aware of.

Is there any reason that it has to be FTP?  Would OpenSSH's scp be better?  FTP is inherently insecure...

	R.

 

-----Original Message-----
From: Radosław Błajda [mailto:community-noreply@qnx.com] 
Sent: Wednesday, November 12, 2008 8:44 AM
To: general-networking
Subject: Re: RE: RE: How to use ftp-proxy

Are the data, from sources io-pkt in location /trunk/dist/pf/libexec/ftp-proxy, used somwhere ??
Could it be compiled as an standalone program ?
If i use io-net version 6. 3. 2. Does it have ftp-proxy builded - in ? 

_______________________________________________
General
http://community.qnx.com/sf/go/post16456

Radosław Błajda(deleted)

11/13/2008 7:36 AM

post16510

Re: RE: RE: RE: How to use ftp-proxy

when I run for test io-net version 6.3.2 and I used command in /etc/ipnat.conf 

map en0 192.168.1.3/32 -> 81.210.62.178/32 proxy port ftp ftp/tcp

map en0 192.168.1.3/32 -> 81.210.62.178/32

Then computer behind NAT (192.168.1.3) has full acces to FTP serwers from outside the network. I would like to get the 
same functionality in io-pkt version 6.4.0. Is it possible ?

Computer with QNX has to function as a gateway (NAT) to the internet for dozens of computers.

Robert Craig

11/13/2008 3:39 PM

post16536

RE: RE: RE: RE: How to use ftp-proxy

I've done a bit of research into this and found that you definitely need ftp-proxy when using PF (but obviously not when
 using ipf, possibly because FTP is using the passive mode of operation and the ipf rules leave the port range open 
enough to enable this to work).

I've looked into the NetBSD code base and they've re-arranged their code layout what it was.  They've moved ftp-proxy 
from under dist/pf/libexec/ftp-proxy to dist/pf/usr.sbin (which is why I was getting confused).

So the upshot of this is that the ftp-proxy code that has to be ported is under dist/pf/libexec/ftp-proxy in our source 
base.

This code, when ported, will give you an ftp-proxy binary that you can run with the "-p" option (for PF) to  provide the
 functionality that you need (as explained in the previous post).  You don't need to compile the ipf.c file since it's a
 compile time option for ftp-proxy that's not needed.

	Robert.

-----Original Message-----
From: Radosław Błajda [mailto:community-noreply@qnx.com] 
Sent: Thursday, November 13, 2008 7:37 AM
To: general-networking
Subject: Re: RE: RE: RE: How to use ftp-proxy

when I run for test io-net version 6.3.2 and I used command in /etc/ipnat.conf 

map en0 192.168.1.3/32 -> 81.210.62.178/32 proxy port ftp ftp/tcp

map en0 192.168.1.3/32 -> 81.210.62.178/32

Then computer behind NAT (192.168.1.3) has full acces to FTP serwers from outside the network. I would like to get the 
same functionality in io-pkt version 6.4.0. Is it possible ?

Computer with QNX has to function as a gateway (NAT) to the internet for dozens of computers.

_______________________________________________
General
http://community.qnx.com/sf/go/post16510

Pavol Kycina

Re: How to use ftp-proxy

Pavol Kycina

11/14/2008 1:14 AM

post16550

Re: How to use ftp-proxy

> Hi
> 
> How to use ftp-proxy ? (io-pkt-v4 6.4.0)
> 


Did you try 
http://www.ftpproxy.org/
?

PKY

Return