FTP Client Proxy
0.3
FTP Client Proxy
pkg_edit.php?xml=ftpproxy.xml
/usr/local/pkg/ftpproxy.inc
/usr/local/pkg/
- https://packages.pfsense.org/packages/config/ftpproxy/ftpproxy.inc
/etc/inc/priv/
- https://packages.pfsense.org/packages/config/ftpproxy/ftpproxy.priv.inc
ftp-proxy
ftp-proxy.sh
ftp-proxy
Client FTP Proxy Daemon
General Settings
listtopic
Proxy Enabled
proxy_enable
Enable the FTP Proxy.
checkbox
off
Local Interface
localints
interfaces_selection
Select the local (LAN type) interfaces which contain FTP clients.
Early Firewall Rule
earlyrule
Check this box to move the automatically added FTP rules higher in the ruleset to bypass explicit blocks. Helps allow passive FTP to arbitrary destinations, but FTP will always be allowed outbound when checked.
checkbox
off
Anonymous Only
anononly
Only permit anonymous FTP connections using the "ftp" or "anonymous" users.
checkbox
off
Source Address
sourceaddr
Enter a VIP to be the source of outgoing control traffic. Leave blank to use the default WAN IP address.
input
Proxy Bypass: Source
bypasssrc
Enter an IP address or alias for source client host(s) which should bypass the proxy.
input
Proxy Bypass: Destination
bypassdst
Enter an IP address or alias for destination server host(s) which should bypass the proxy.
input
Bind Port (Default: 8021)
bindport
Port where the proxy will listen for redirected connections. Do not set this to 21.
input
Maximum Sessions (Default: 100)
maxessions
Maximum number of concurrent FTP sessions. When the proxy reaches this limit, new connections are denied. Must be between 1 and 500.
input
Traffic Shaping Queue
tsq
Create rules with the specified queue appended so that data connections can be queued.
input
Rewrite Source to Port 20
src20
Rewrite source port to 20 in active mode to suit ancient clients that insist on this behavior.
checkbox
off
Idle Timeout (Default: 86400)
idletimeout
(Seconds) Number of seconds that the control connection can be idle, before the proxy will disconnect. The maximum is 86400 seconds. Do not set this too low, because the control connection is usually idle when large data transfers are taking place.
input
Log Connections
log
Set the 'log' flag on pf rules committed by ftp-proxy.
checkbox
off
sync_package_ftpproxy();
validate_form_ftpproxy($_POST, $input_errors);