bin/71458: ftp-proxy doesnt start

[Divacky Roman]

>Number:         71458
>Category:       bin
>Synopsis:       ftp-proxy doesnt start
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Sep 07 11:50:22 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Divacky Roman
>Release:        FreeBSD 5.3-BETA3 i386
>Organization:
home
>Environment:
FreeBSD queeg500 5.3-BETA3 FreeBSD 5.3-BETA3 #5: Tue Sep  7 13:01:38 CEST 2004
   rdivacky at queeg500:/usr/obj/usr/src/sys/QUEEG  i386
   

	
>Description:
When I try to use ftp-proxy with pf I am getting this error:
        Sep  7 13:28:50 queeg500 ftp-proxy[845]: getsockname() failed (Socket
	operation on non-socket)
so somethine is screwed up.
I've just put this:
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
into my pf.conf
and this:
ftp-proxy       stream  tcp     nowait  root    /usr/libexec/ftp-proxy ftp-proxy
 -D3
into my inetd.conf

my whole pf.conf looks like
ext_if="vr0"
int_if="xl0"

#normalize packets
scrub in all

altq on $ext_if bandwidth 256Kb cbq queue {ssh_i web other} 
queue ssh_i bandwidth 25% cbq(borrow ecn)
queue web bandwidth 25% cbq(borrow ecn)
queue other bandwidth 50% cbq(borrow default ecn)

#ftp redirection
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
#nat
nat on $ext_if from $int_if:network to any -> ($ext_if)

#rules
#default to block all
block in on $ext_if all
#pass all out while keeping state. and queue it
pass out on $ext_if from any to any keep state queue other
#queuing
pass on $ext_if proto tcp from any to any port ssh keep state queue(ssh_i, other)
pass out on $ext_if proto tcp from any to any port http keep state queue web
#ftp proxy
pass in on $ext_if inet proto tcp from any to $ext_if user proxy keep state queue other
#allow icmp
pass in on $ext_if inet proto icmp from any to any
 
if it helps...
	
>How-To-Repeat:
	Set it as I did and it could do the same...
	
>Fix:

I am not aware of any fix...
	


>Release-Note:
>Audit-Trail:
>Unformatted: