From owner-freebsd-questions@FreeBSD.ORG Tue Apr 12 07:08:24 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BA47C16A4CE for ; Tue, 12 Apr 2005 07:08:24 +0000 (GMT) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.198]) by mx1.FreeBSD.org (Postfix) with ESMTP id 565E743D31 for ; Tue, 12 Apr 2005 07:08:24 +0000 (GMT) (envelope-from e.byaru@gmail.com) Received: by wproxy.gmail.com with SMTP id 36so1295626wra for ; Tue, 12 Apr 2005 00:08:23 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:user-agent:x-accept-language:mime-version:to:subject:x-enigmail-version:x-enigmail-supports:content-type:from; b=QboROxA6lhYRLF+9zTgktpUyDKrPrHYPgrcEXUsuQG2cOkTkchB0vzLK65hZAW2SL+blOvfhOab+3vuChgErG6AK2HxQLpxVyjQagflGIjE2MSJZWz0zx69Jo94vuBdnubKMfGjPMPd065y9E8D0Ty24fu+kVL/BQ6evDRfgQYY= Received: by 10.54.21.45 with SMTP id 45mr3094706wru; Tue, 12 Apr 2005 00:08:23 -0700 (PDT) Received: from ?196.216.3.2? ([196.216.3.2]) by mx.gmail.com with ESMTP id 35sm1498192wra.2005.04.12.00.08.22; Tue, 12 Apr 2005 00:08:23 -0700 (PDT) Message-ID: <425B7342.2080307@gmail.com> Date: Tue, 12 Apr 2005 09:05:38 +0200 User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041217 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org X-Enigmail-Version: 0.90.0.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig7CD87BA85B356D46665C1FC2" From: Clement Twine Subject: weird problem with ipfw and ftp X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2005 07:08:24 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig7CD87BA85B356D46665C1FC2 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit hi freebsd users, i have a problem with users accessing my ftp service from the internet. everything was working well until i changed from Linux/shorewall to freebsd/ipfw as my firewall. my setup is briefly as follows: FTP_Server (10.0.0.1) --- Firewall (IPFW) ----- INTERNET The linux rules were just two (and were working): allow tcp from any to 10.0.0.1 21 allow tcp from 10.0.0.1 21 to any I have the following in ipfw but they have refused to work! ipfw add 00010 allow tcp from any to 10.0.0.1 21 ipfw add 00011 allow tcp from 10.0.0.1 21 to any The problem is that an ftp session is established, but when the session enters passive mode, the ftp session hangs. Are there any other ports that need to be opened? Has anyone had such a problem before? I can see in the logs that unprivileged ports are responding from the ftp server to the requestor - but have tried all combinations of rules to no avail! Please help! Regards, Clem. --------------enig7CD87BA85B356D46665C1FC2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iQDVAwUBQltzSOkIG2whqpjBAQLG0wX/Wzcebq3O3lpO7wi1mMB7i8+3XotH8FZ+ nC47SyAlzCc3kc0h83+r0foyc/lNyoqkS/ZQ+N9J8CSZNepyebE92VMXWu1iJeB1 BYaZOmqrmJTKnibqsLf+PQ92anKjiFsKYyzCKakmxEB3479D+eEK+x7PTu2FFwSV H73WXlZJ3MEyorVSceAVVbeT4BzGY0FR9EsDxucOlqU1IDAS4xHpfzZYCd+KxbO9 FoIlXwKRHqX4VlsDL0YwYtKHlfoIoo4q =bTFO -----END PGP SIGNATURE----- --------------enig7CD87BA85B356D46665C1FC2--