pf/ftp-proxy/ftp-proxy.c

91 	u_int16_t		 port;
157 	s->port = 0;
225 		s->port = parse_port(s->cmd);
226 		if (s->port < MIN_PORT) {
227 			logmsg(LOG_CRIT, "#%d bad port in '%s'", s->id,
433 	 * Find out the real server and port that the client wanted.
561 	s->port = 0;
788 	logmsg(LOG_NOTICE, "listening on %s port %s", listen_ip, listen_port);
803 	unsigned int	 port, v[6];
830 		n = sscanf(p, "(|||%u|)", &port);
831 		if (n == 1 && port < 65536)
832 			return (port);
836 		    &v[3], &port);
838 		    v[3] < 256 && port < 65536)
839 			return (port);
840 		n = sscanf(p, " |2|%*[a-fA-F0-9:]|%u|", &port);
841 		if (n == 1 && port < 65536)
842 			return (port);
854 	/* Random should be good enough for avoiding port collisions. */
860 proxy_reply(int cmd, struct sockaddr *sa, u_int16_t port)
868 		    "PORT %s,%u,%u\r\n", sock_ntop(sa), port / 256,
869 		    port % 256);
874 		        port / 256, port % 256);
879 			    "EPRT |1|%s|%u|\r\n", sock_ntop(sa), port);
882 			    "EPRT |2|%s|%u|\r\n", sock_ntop(sa), port);
886 		    "229 Entering Extended Passive Mode (|||%u|)\r\n", port);
937 	s->port = 0;
955 	 *     port collisions, to aid security (some systems pick weak
956 	 *     ports) or to satisfy RFC requirements (source port 20).
973 		s->port = parse_port(s->cmd);
974 		if (s->port < MIN_PORT) {
975 			logmsg(LOG_CRIT, "#%d bad port in '%s'", s->id,
980 		logmsg(LOG_INFO, "#%d passive: client to server port %d"
981 		    " via port %d", s->id, s->port, s->proxy_port);
990 		/* rdr from $client to $orig_server port $proxy_port -> $server
991 		    port $port */
993 		    server_sa, s->port) == -1)
996 		/* nat from $client to $server port $port -> $proxy */
997 		if (add_nat(s->id, client_sa, server_sa, s->port, proxy_sa,
1001 		/* pass in from $client to $server port $port */
1003 		    s->port) == -1)
1006 		/* pass out from $proxy to $server port $port */
1008 		    s->port) == -1)
1014 		logmsg(LOG_INFO, "#%d active: server to client port %d"
1015 		    " via port %d", s->id, s->port, s->proxy_port);
1021 		/* rdr from $server to $proxy port $proxy_port -> $client port
1022 		    $port */
1024 		    client_sa, s->port) == -1)
1027 		/* nat from $server to $client port $port -> $orig_server port
1031 			if (add_nat(s->id, server_sa, client_sa, s->port,
1035 			/* Let pf pick a source port from the standard range. */
1036 			if (add_nat(s->id, server_sa, client_sa, s->port,
1042 		/* pass in from $server to $client port $port */
1043 		if (add_filter(s->id, PF_IN, server_sa, client_sa, s->port) ==
1047 		/* pass out from $orig_server to $client port $port */
1048 		if (add_filter(s->id, PF_OUT, orig_sa, client_sa, s->port) ==
1064 	s->port = 0;
1138 	    " [-D level] [-m maxsessions]\n                 [-P port]"
1139 	    " [-p port] [-q queue] [-R address] [-T tag]\n"