When servicing an internal FTP server, punch ipfirewall(4) holes
for passive mode data connections (PASV/EPSV -> 227/229). Well, the actual punching happens a bit later, when the aliasing link becomes fully specified. Prodded by: Danny Carroll <dannycarroll@hotmail.com> MFC after: 1 week
This commit is contained in:
parent
b0eb8799f3
commit
b9afc27cdd
@ -483,11 +483,8 @@ NewFtpMessage(struct ip *pip,
|
||||
struct tcphdr *tc;
|
||||
|
||||
#ifndef NO_FW_PUNCH
|
||||
if (ftp_message_type == FTP_PORT_COMMAND ||
|
||||
ftp_message_type == FTP_EPRT_COMMAND) {
|
||||
/* Punch hole in firewall */
|
||||
PunchFWHole(ftp_link);
|
||||
}
|
||||
/* Punch hole in firewall */
|
||||
PunchFWHole(ftp_link);
|
||||
#endif
|
||||
|
||||
/* Calculate data length of TCP packet */
|
||||
|
@ -483,11 +483,8 @@ NewFtpMessage(struct ip *pip,
|
||||
struct tcphdr *tc;
|
||||
|
||||
#ifndef NO_FW_PUNCH
|
||||
if (ftp_message_type == FTP_PORT_COMMAND ||
|
||||
ftp_message_type == FTP_EPRT_COMMAND) {
|
||||
/* Punch hole in firewall */
|
||||
PunchFWHole(ftp_link);
|
||||
}
|
||||
/* Punch hole in firewall */
|
||||
PunchFWHole(ftp_link);
|
||||
#endif
|
||||
|
||||
/* Calculate data length of TCP packet */
|
||||
|
Loading…
Reference in New Issue
Block a user