1 <?xml version="1.0"?> |
|
2 <!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1"> |
|
3 <!-- |
|
4 |
|
5 CDDL HEADER START |
|
6 |
|
7 The contents of this file are subject to the terms of the |
|
8 Common Development and Distribution License (the "License"). |
|
9 You may not use this file except in compliance with the License. |
|
10 |
|
11 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE |
|
12 or http://www.opensolaris.org/os/licensing. |
|
13 See the License for the specific language governing permissions |
|
14 and limitations under the License. |
|
15 |
|
16 When distributing Covered Code, include this CDDL HEADER in each |
|
17 file and include the License file at usr/src/OPENSOLARIS.LICENSE. |
|
18 If applicable, add the following below this CDDL HEADER, with the |
|
19 fields enclosed by brackets "[]" replaced with your own identifying |
|
20 information: Portions Copyright [yyyy] [name of copyright owner] |
|
21 |
|
22 CDDL HEADER END |
|
23 |
|
24 Copyright (c) 2014, 2016, Oracle and/or its affiliates. All rights reserved. |
|
25 |
|
26 NOTE: This service manifest is not editable; its contents will |
|
27 be overwritten by package or patch operations, including |
|
28 operating system upgrade. Make customizations in a different |
|
29 file. |
|
30 --> |
|
31 |
|
32 <service_bundle type='manifest' name='network/firewall/ftp-proxy' > |
|
33 |
|
34 <service |
|
35 name='network/firewall/ftp-proxy' |
|
36 type='service' |
|
37 version='1'> |
|
38 <dependency |
|
39 name='firewall' |
|
40 grouping='require_all' |
|
41 restart_on='restart' |
|
42 type='service'> |
|
43 <service_fmri value='svc:/network/firewall:default'/> |
|
44 </dependency> |
|
45 |
|
46 <method_context> |
|
47 <method_credential |
|
48 user='daemon' |
|
49 group='daemon' |
|
50 privileges='basic,!file_write,!file_link_any,!proc_info,!proc_session,sys_ip_config' |
|
51 /> |
|
52 </method_context> |
|
53 |
|
54 <exec_method |
|
55 type='method' |
|
56 name='start' |
|
57 exec='/lib/svc/method/ftp-proxy start "%{ftp-proxy/anonymous-only}" "%{ftp-proxy/proxy-NAT-address}" "%{ftp-proxy/proxy-listen-address}" "%{ftp-proxy/debug-level}" "%{ftp-proxy/maxsessions}" "%{ftp-proxy/listen-port}" "%{ftp-proxy/reverse-mode-address}" "%{ftp-proxy/reverse-mode-port}" "%{ftp-proxy/always-use-ftp-data-port}" "%{ftp-proxy/tag}" "%{ftp-proxy/timeout}" "%{ftp-proxy/log}"' |
|
58 timeout_seconds='30'> |
|
59 </exec_method> |
|
60 |
|
61 <exec_method |
|
62 type='method' |
|
63 name='stop' |
|
64 exec=':kill' |
|
65 timeout_seconds='60'> |
|
66 </exec_method> |
|
67 |
|
68 <exec_method |
|
69 type='method' |
|
70 name='refresh' |
|
71 exec=':kill' |
|
72 timeout_seconds='5'> |
|
73 </exec_method> |
|
74 |
|
75 <instance name='default' enabled='false' complete='true'> |
|
76 <property_group name="general" type="framework"> |
|
77 <propval |
|
78 name='action_authorization' |
|
79 type='astring' |
|
80 value='solaris.smf.manage.network.firewall' /> |
|
81 <propval |
|
82 name='value_authorization' |
|
83 type='astring' |
|
84 value='solaris.smf.manage.network.firewall' /> |
|
85 </property_group> |
|
86 <property_group name='ftp-proxy' type='application'> |
|
87 <propval name='anonymous-only' type='astring' value='off' /> |
|
88 <propval name='proxy-NAT-address' type='astring' value='' /> |
|
89 <propval |
|
90 name='proxy-listen-address' |
|
91 type='astring' |
|
92 value='127.0.0.1' /> |
|
93 <propval name='debug-level' type='integer' value='5' /> |
|
94 <propval |
|
95 name='maxsessions' |
|
96 type='integer' |
|
97 value='100' /> |
|
98 <propval |
|
99 name='listen-port' |
|
100 type='integer' |
|
101 value='8021' /> |
|
102 <propval |
|
103 name='reverse-mode-address' |
|
104 type='astring' |
|
105 value='' /> |
|
106 <propval name='reverse-mode-port' type='integer' value='21' /> |
|
107 <propval |
|
108 name='always-use-ftp-data-port' |
|
109 type='astring' |
|
110 value='off' /> |
|
111 <propval name='tag' type='astring' value=''/> |
|
112 <propval name='timeout' type='integer' value='86400' /> |
|
113 <propval name='log' type='astring' value='off' /> |
|
114 <propval |
|
115 name='value_authorization' |
|
116 type='astring' |
|
117 value='solaris.smf.value.network.firewall' /> |
|
118 </property_group> |
|
119 </instance> |
|
120 |
|
121 <stability value='Unstable' /> |
|
122 |
|
123 <template> |
|
124 <common_name> |
|
125 <loctext xml:lang='C'> |
|
126 ftp-proxy - FTP proxy daemon for PF |
|
127 </loctext> |
|
128 </common_name> |
|
129 <documentation> |
|
130 <manpage title='ftp-proxy' section='1M' manpath='/usr/share/man' /> |
|
131 </documentation> |
|
132 <pg_pattern name="ftp-proxy" type="application" target="instance" required="true"> |
|
133 <prop_pattern name="anonymous-only" type="astring" required="true"> |
|
134 <cardinality min="1" max="1"/> |
|
135 <constraints> |
|
136 <value name="on"/> |
|
137 <value name="off"/> |
|
138 </constraints> |
|
139 </prop_pattern> |
|
140 <prop_pattern name="proxy-NAT-address" type="astring" required="true"> |
|
141 <cardinality min="1" max="1"/> |
|
142 </prop_pattern> |
|
143 <prop_pattern name="proxy-listen-address" type="astring" required="true"> |
|
144 <cardinality min="1" max="1"/> |
|
145 </prop_pattern> |
|
146 <prop_pattern name="debug-level" type="integer" required="true"> |
|
147 <cardinality min="1" max="1"/> |
|
148 <constraints> |
|
149 <range min="0" max="7"/> |
|
150 </constraints> |
|
151 </prop_pattern> |
|
152 <prop_pattern name="maxsessions" type="integer" required="true"> |
|
153 <cardinality min="1" max="1"/> |
|
154 <constraints> |
|
155 <range min="1" max="500"/> |
|
156 </constraints> |
|
157 </prop_pattern> |
|
158 <prop_pattern name="listen-port" type="integer" required="true"> |
|
159 <cardinality min="1" max="1"/> |
|
160 <constraints> |
|
161 <range min="0" max="65535"/> |
|
162 </constraints> |
|
163 </prop_pattern> |
|
164 <prop_pattern name="reverse-mode-address" type="astring" required="true"> |
|
165 <cardinality min="0" max="1"/> |
|
166 </prop_pattern> |
|
167 <prop_pattern name="reverse-mode-port" type="integer" required="true"> |
|
168 <cardinality min="0" max="1"/> |
|
169 <constraints> |
|
170 <range min="0" max="65535"/> |
|
171 </constraints> |
|
172 </prop_pattern> |
|
173 <prop_pattern name="always-use-ftp-data-port" type="astring" required="true"> |
|
174 <cardinality min="1" max="1"/> |
|
175 <constraints> |
|
176 <value name="on"/> |
|
177 <value name="off"/> |
|
178 </constraints> |
|
179 </prop_pattern> |
|
180 <prop_pattern name="tag" type="astring" required="true"> |
|
181 <cardinality min="0" max="1"/> |
|
182 </prop_pattern> |
|
183 <prop_pattern name="timeout" type="integer" required="true"> |
|
184 <cardinality min="1" max="1"/> |
|
185 <constraints> |
|
186 <range min="0" max="86400"/> |
|
187 </constraints> |
|
188 </prop_pattern> |
|
189 <prop_pattern name="log" type="astring" required="true"> |
|
190 <cardinality min="1" max="1"/> |
|
191 <constraints> |
|
192 <value name="on"/> |
|
193 <value name="off"/> |
|
194 <value name="all"/> |
|
195 </constraints> |
|
196 </prop_pattern> |
|
197 <prop_pattern name="value_authorization" type="astring"> |
|
198 </prop_pattern> |
|
199 </pg_pattern> |
|
200 </template> |
|
201 </service> |
|
202 |
|
203 </service_bundle> |
|