ITP: proxy-suite and ftp-proxy
SuSE Proxy-Suite is a set of programs to enhance firewall security. The
first (and currently only) component released is the FTP-Proxy:
o Securely relays FTP connections between clients and servers
o Can switch connections from active to passive and vice versa
o Utilizes port ranges for both control and data connections
o Provides extensive auditing (via syslog or rotating log files)
o Can separate user related from system triggered audit events
o Provides command restriction based on logged in user name
o Allows command argument checking with regular expressions
o Is able to retrieve configuration data from an LDAP directory
o Has been thoroughly tested against buffer overflow attacks
o Fully conforms to RFC 959 and 1123 (the basic FTP RFCs)
o Planned to support RFC 1579 ("Firewall Friendly FTP")
o Planned to support RFC 2428 (IPv6 Extensions for FTP)
o Based on GNU AutoConf, supposed to run on many UNIX systems
SuSE Proxy-Suite (including FTP-Proxy) are released under the GNU General
Public License. I have also contacted the upstream developer at SuSE
(Volker Wiegand), and he has graciously given his consent and encouragement
for its inclusion in Debian.
Reply to: