When servicing an internal FTP server, punch ipfirewall(4) holes

for passive mode data connections (PASV/EPSV -> 227/229).  Well,
the actual punching happens a bit later, when the aliasing link
becomes fully specified.

Prodded by:	Danny Carroll <dannycarroll@hotmail.com>
MFC after:	1 week
This commit is contained in:
ru 2001-11-27 10:50:23 +00:00
parent b0eb8799f3
commit b9afc27cdd
2 changed files with 4 additions and 10 deletions

View File

@ -483,11 +483,8 @@ NewFtpMessage(struct ip *pip,
struct tcphdr *tc;
#ifndef NO_FW_PUNCH
if (ftp_message_type == FTP_PORT_COMMAND ||
ftp_message_type == FTP_EPRT_COMMAND) {
/* Punch hole in firewall */
PunchFWHole(ftp_link);
}
/* Punch hole in firewall */
PunchFWHole(ftp_link);
#endif
/* Calculate data length of TCP packet */

View File

@ -483,11 +483,8 @@ NewFtpMessage(struct ip *pip,
struct tcphdr *tc;
#ifndef NO_FW_PUNCH
if (ftp_message_type == FTP_PORT_COMMAND ||
ftp_message_type == FTP_EPRT_COMMAND) {
/* Punch hole in firewall */
PunchFWHole(ftp_link);
}
/* Punch hole in firewall */
PunchFWHole(ftp_link);
#endif
/* Calculate data length of TCP packet */