-
Notifications
You must be signed in to change notification settings - Fork 585
/
ftpproxy.xml
147 lines (146 loc) · 5.5 KB
/
ftpproxy.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE packagegui SYSTEM "./schema/packages.dtd">
<?xml-stylesheet type="text/xsl" href="./xsl/package.xsl"?>
<packagegui>
<copyright>
<![CDATA[
/*
* ftpproxy.xml
*
* part of pfSense (https://www.pfsense.org)
* Copyright (c) 2015-2024 Rubicon Communications, LLC (Netgate)
* All rights reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
]]>
</copyright>
<name>ftpclientproxy</name>
<version>%%PKGVERSION%%</version>
<title>Services/FTP Client Proxy</title>
<aftersaveredirect>pkg_edit.php?xml=ftpproxy.xml</aftersaveredirect>
<include_file>/usr/local/pkg/ftpproxy.inc</include_file>
<menu>
<name>FTP Client Proxy</name>
<tooltiptext>Modify FTP Client Proxy settings.</tooltiptext>
<section>Services</section>
<configfile>ftpproxy.xml</configfile>
<url>/pkg_edit.php?xml=ftpproxy.xml</url>
</menu>
<service>
<name>ftp-proxy</name>
<rcfile>ftp-proxy.sh</rcfile>
<executable>ftp-proxy</executable>
<description>Client FTP Proxy Daemon</description>
</service>
<fields>
<field>
<name>General Settings</name>
<type>listtopic</type>
</field>
<field>
<fielddescr>Proxy Enabled</fielddescr>
<fieldname>enable</fieldname>
<description>Enable the FTP Proxy.</description>
<type>checkbox</type>
<default_value>off</default_value>
</field>
<field>
<fielddescr>Local Interface</fielddescr>
<fieldname>localints</fieldname>
<type>interfaces_selection</type>
<description>Select the local (LAN type) interfaces which contain FTP clients.</description>
<required/>
<multiple/>
</field>
<field>
<fielddescr>Early Firewall Rule</fielddescr>
<fieldname>earlyrule</fieldname>
<description>Check this box to move the automatically added FTP rules higher in the ruleset to bypass explicit blocks. Helps allow passive FTP to arbitrary destinations, but FTP will always be allowed outbound when checked.</description>
<type>checkbox</type>
<default_value>off</default_value>
</field>
<field>
<fielddescr>Anonymous Only</fielddescr>
<fieldname>anononly</fieldname>
<description>Only permit anonymous FTP connections using the "ftp" or "anonymous" users.</description>
<type>checkbox</type>
<default_value>off</default_value>
</field>
<field>
<fielddescr>Source Address</fielddescr>
<fieldname>sourceaddr</fieldname>
<description>Enter a VIP to be the source of outgoing control traffic. Leave blank to use the default WAN IP address.</description>
<type>input</type>
</field>
<field>
<fielddescr>Proxy Bypass: Source</fielddescr>
<fieldname>bypasssrc</fieldname>
<description>Enter an IP address or alias for source client host(s) which should bypass the proxy.</description>
<type>input</type>
</field>
<field>
<fielddescr>Proxy Bypass: Destination</fielddescr>
<fieldname>bypassdst</fieldname>
<description>Enter an IP address or alias for destination server host(s) which should bypass the proxy.</description>
<type>input</type>
</field>
<field>
<fielddescr>Bind Port (Default: 8021)</fielddescr>
<fieldname>bindport</fieldname>
<description>Port where the proxy will listen for redirected connections. Do not set this to 21.</description>
<type>input</type>
</field>
<field>
<fielddescr>Maximum Sessions (Default: 100)</fielddescr>
<fieldname>maxessions</fieldname>
<description>Maximum number of concurrent FTP sessions. When the proxy reaches this limit, new connections are denied. Must be between 1 and 500.</description>
<type>input</type>
</field>
<field>
<fielddescr>Traffic Shaping Queue</fielddescr>
<fieldname>tsq</fieldname>
<description>Create rules with the specified queue appended so that data connections can be queued.</description>
<type>input</type>
</field>
<field>
<fielddescr>Rewrite Source to Port 20</fielddescr>
<fieldname>src20</fieldname>
<description>Rewrite source port to 20 in active mode to suit ancient clients that insist on this behavior.</description>
<type>checkbox</type>
<default_value>off</default_value>
</field>
<field>
<fielddescr>Idle Timeout (Default: 86400)</fielddescr>
<fieldname>idletimeout</fieldname>
<description>(Seconds) Number of seconds that the control connection can be idle, before the proxy will disconnect. The maximum is 86400 seconds. Do not set this too low, because the control connection is usually idle when large data transfers are taking place.</description>
<type>input</type>
</field>
<field>
<fielddescr>Log Connections</fielddescr>
<fieldname>log</fieldname>
<description>Set the 'log' flag on pf rules committed by ftp-proxy.</description>
<type>checkbox</type>
<default_value>off</default_value>
</field>
</fields>
<custom_php_resync_config_command>
sync_package_ftpproxy();
</custom_php_resync_config_command>
<custom_php_validation_command>
validate_form_ftpproxy($_POST, $input_errors);
</custom_php_validation_command>
<filter_rules_needed>
ftpproxy_generate_rules
</filter_rules_needed>
</packagegui>