Subject: CVS commit: wip/ftpsesame
From: Peter Postma
Date: 2004-11-10 19:33:37
Message id: E1CRxHl-0006oZ-Ug@sc8-pr-cvs1.sourceforge.net

Log Message:
Initial import of ftpsesame-0.95.

ftpsesame helps the FTP protocol get through your pf(4) firewall. It does
this by passively analysing FTP control connections and adding rules into a
pf(4) anchor when an FTP data connection is about to commence.

You might want to try ftpsesame instead of ftp-proxy(8) for the
following reasons: 

* it runs on "transparent" (no IP address) bridges 
* you need packetfilter performance on all data connections 
* you have to handle lots of simultaneous sessions 
* you do not want to redirect any traffic to the firewall itself:
  for IP accounting or other reasons

In general, ftpsesame is a good choice to run on a firewall in front of
multiple FTP servers, where no NAT is involved. ftp-proxy(8) is usually the
best choice when users behind NAT need to access FTP servers on the Internet.
In other situations it depends, sometimes they are useful together.

Works with security/pflkm and on OpenBSD 3.6.


Files:
RevisionActionfile
1.1importwip/ftpsesame/Makefile
1.1importwip/ftpsesame/distinfo
1.1importwip/ftpsesame/PLIST
1.1importwip/ftpsesame/DESCR
1.1importwip/ftpsesame/patches/patch-aa
1.1importwip/ftpsesame/patches/patch-ab
1.1importwip/ftpsesame/patches/patch-ac