Freebsd on Chrissicool

FreeBSD Imports pf 4.1 — But WTF?

Sat, 07 Jul 2007 00:00:00 +0000

I just saw that the guys at FreeBSD just imported pf as of OpenBSD 4.1. With that in base, there is no need to have an extra port for ftp/ftp-proxy anymore for the 7.0 branch.

So I wanted to write a patch to IGNORE the port for FreeBSD>=7. But then I saw that someone was faster than me.

This all sounds like good news, and indeed it is. Up to a certain point. Originally I had written the port, because FreeBSD lacks libevent, which ftp-proxy needs. Now the FreeBSD guys actually did import the new ftp-proxy, but they did not import libevent… in reality they are linking it against a local copy of libevent in their ftp-proxy code.

FreeBSD ftp-proxy Port Released

Tue, 06 Mar 2007 00:00:00 +0000

It’s been a while since my last entry here. No, I am not dead (yet).

I finally managed to release my first FreeBSD port to the public. It is the OpenBSD ftp-proxy(8) program, which was rewritten from scratch by the OpenBSD guys. I have been waiting for a port for ages now, so I finally came up with my own solution.

The proxy uses the anchor facility of the pf firewall. This is a very neat design, since you can handle virtually every situation of a firewalled FTP server. Of course, the program comes privilege separated, as it is OpenBSD best-practice. Fortunately the daemon user “proxy” is already in the base system for the old ftp-proxy.