|
From: Ben L. <be...@ti...> - 2003-10-14 02:51:59
|
On Oct 7, 2003, at 1:00 PM, civ wrote: > Hi all! > > Had fun tracking this one down.. > OpenBSD 3.3 -STABLE > OpenSoekris-1.0.11 > > Problem: > ftp-proxy would not start once copied to the Soekris, no error > messages were displayed > > Solution: > start syslogd with -p /dev/log > ifconfig lo0 inet 127.0.0.1 netmask 0xff000000 > > Here's why: > (on the Soekris) > 'ktrace /usr/libexec/ftp-proxy' and 'kdump ktrace.out' told me more > than once that /dev/log did not exist. It was right. googled to find > what creates /dev/log, found that syslogd does. looked in /etc/rc and > saw that syslogd was started with -p /tmp/log. started 'syslogd -p > /dev/log' and /dev/log existed.. started /usr/libexec/ftp-proxy and I > see error messages now (bind: Can't assign requested address).. > progress, yeay. so I start ftp-proxy as it is meant to be started from > inetd.. inetd.conf has '127.0.0.1:8021 stream tcp nowait root > /usr/libexec/ftp-proxy ftp-proxy'. still get the bind error above.. > check if lo0 is up, it is not, so 'ifconfig lo0 inet 127.0.0.1 netmask > 0xff000000' brings it up and inetd starts without complaints. > > one further thing, once the pf rules were set, the proxy did not work > as advertised. I am doing NAT on the outside interface, so a quick > look at man ftp-proxy tells me to start it with the -n option. so the > inetd.conf line becomes:'127.0.0.1:8021 stream tcp nowait root > /usr/libexec/ftp-proxy ftp-proxy -n' and all is well. > > enjoy, > --Civ > www.8thdaytech.com In the next release (don't have a definite date yet, but "soon") we will have a ftp-proxy that does not require inetd. If you want to play with it, you can grab it from CVS. // Ben -- "Technically, I can go and break the fingers of a sysadmin of any operating system and get the root password. This doesn't make it a localhost or remote attack." --Art Grabowski |