ftp-proxy in openbsd

[brody]

Hi

It is possible to put users connecting to ftp servers via ftp-proxy to different queue ?

I use -q flag but all user use one pipe?

Thanks for help

[Colin]

That certainly seems possible although I haven't played with queues enough.
I'm supposing you would just need a rule that tags all traffic going to ftp-proxy to a specific queue.

So take a look at:

http://www.openbsd.org/faq/pf/queueing.html

[s2scott]

Originally Posted by brody

Is it possible to put users connecting to ftp servers via ftp-proxy to different queue ?

There are issues of tagging, and therefore, queuing the ftp control channel vs. the ftp data channel (stream). This was discussed on misc@openbsd.org earlier this year.

ftp-proxy's author opted to drop the "quick" modifier of the auto-magical ftp-proxy anchor; therefore, making the tag processable by your rule set including for purposes of queuing the ftp data channel/stream.

I am not sure where this dropped-quick-modifier fix is on the stable-snapshot version tree. It may be the new default in 4.4, but I'm not sure.

A search of the misc@openbsd.org archive (2008) may yield the answer. Or, after searching, a very polite "ask" at misc@ may garner you an answer.

/S