ssl-lbnc - A(nother) FTP Relay Program. ssl-lbnc [options] host port host is best put in IP dot-notation. options: -p : Only use PASV to server (Change clients PORT to PASV) -o : Only use PORT to server (Change clients PASV to PORT) -d : debug print -l [port] : Set local listen port -i [ip] : Force use of 'ip' to reply to PASV to clients (for NATed hosts) -a : Send non-standard IDEN packet to FTPD (-aa for IDNT) -t : Enable internal 'SITE STaT' command to view internal state -D : Dumb mode - do not relay data traffic. [1] -I : Ident mode - request ident lookup for -a ***** SERVER SETTINGS (lbnc <=--=> FTP server) ***** -s : Disable SSL on lbnc <--> FTP server connection -S : Force SSL on lbnc <--> FTP server connection -v : Force SSL on Server Data sessions OFF -V : Force SSL on Server Data sessions ON Default setting is to attempt SSL both on control and data, and fall back to plain if not successful. ***** CLIENT SETTINGS (FTP client <=--=> lbnc) ***** -c : Disable SSL on FTP client <--> lbnc connection -C : Force SSL on FTP client <--> lbnc connection -b : Force SSL on Client Data sessions OFF -B : Force SSL on Client Data sessions ON Default setting is to allow client to attempt SSL, and to chose PROT level for data sessions. -w [ip] : Optional bind interface for control sessons -W [ip] : Optional bind interface for data sessons -e [path] : Specify egd socket for systems without /dev/random -r [path] : Specify SSL PEM certificate file (lbnc.pem) -L [list] : Specify SSL ciphers wanted [1] - Insecure if your aim is to mask the IP of the FTPD