OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Has anyone ever got TFTP-Proxy working?
« previous next »
  • Print
Pages: [1]

Author Topic: Has anyone ever got TFTP-Proxy working?  (Read 6675 times)

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Has anyone ever got TFTP-Proxy working?
« on: January 25, 2019, 01:46:16 am »
There was a post a while back with a link to GitHub but nothing that was firm.
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #1 on: January 25, 2019, 06:00:01 am »
Someone in IRC got it working, yes.
I could build a simple plugin, but without upload function
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #2 on: January 25, 2019, 02:08:27 pm »
I followed the what previous users did, but I'm not sure it's working properly. I don't see it starting.
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #3 on: January 25, 2019, 03:53:51 pm »
Do you see receiving packets on the firewall interface? If yes, check firewall logs
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #4 on: January 25, 2019, 05:46:27 pm »
When I send the tftp request, the reply is being blocked.
Logged

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #5 on: January 25, 2019, 05:49:49 pm »
FYI, I've added this:
<?php

function tftpproxy_enabled()
{
    return true;
}

function tftpproxy_firewall($fw)
{
    if (!tftpproxy_enabled()) {
        return;
    }

    $fw->registerAnchor('tftp-proxy/*', 'nat');
    $fw->registerAnchor('tftp-proxy/*', 'rdr');
    $fw->registerAnchor('tftp-proxy/*', 'fw');
}

And I've added this:

tftp    dgram   udp     wait    root    /usr/libexec/tftp-proxy tftp-proxy -v


I reloaded the services after that.

Thanks
Logged

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #6 on: January 27, 2019, 01:35:48 pm »
Anyone? How about an alternative method?
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #7 on: January 27, 2019, 01:37:18 pm »
Why dont you just allow tftp on the interface rule tab?
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #8 on: January 27, 2019, 03:19:48 pm »
Not sure I understand what you're asking. Are you saying to port forward it? TFTP responds on a random UDP 1024> and the firewall rejects it. I've port forwarded that range back into the internal host but the FW re-writes the port number so the host no longer knows what to do with it.
Logged

wfhausmann

  • Newbie
  • *
  • Posts: 13
  • Karma: 1
    • View Profile
Re: Has anyone ever got TFTP-Proxy working?
« Reply #9 on: January 30, 2019, 03:39:53 am »
So does anyone else have any thoughts on how to get tftp for a Cisco phone through the firewall?
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Has anyone ever got TFTP-Proxy working?
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2