Hello all, I have a few OpenBSD servers faithfully running NAT in various spots.
One of these firewalls is doing VERY simple NAT on an interface, almost a cut and past from the PF pages (only really the IP addresses got changed). However, the client wants to be able to connect to an FTP server that is using TLS. My first thought of this was "you can't". however, I was quickly disabused of this idea by connecting to their server using the program they use (FileZilla) within a Windows XP instance running inside Parrallels through a Netlink ADSL modem. That is two sets of translation happening! This got me confused as everything I have read about TLS says this can't be done. At least not with NAT. So I am wondering if anyone has had any experience with this and can point me in the right direction? The only way I can think that the Netlink is doing it is by doing some sort of Dynamic IP Address forwarding (setting up some rule that just dumps all traffic directly...) but I don't know. Regards Mikel
