Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Jun 1999 11:14:33 -0700 (PDT)
From:      Archie Cobbs <archie@whistle.com>
To:        fpscha@via-net-works.net.ar (Fernando Schapachnik)
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Passive FTP
Message-ID:  <199906081814.LAA57994@bubba.whistle.com>
In-Reply-To: <199906081509.MAA19423@ns1.sminter.com.ar> from Fernando Schapachnik at "Jun 8, 99 12:09:50 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Fernando Schapachnik writes:
> 	Anyone has a sample on how to set up ipfw to permit passive FTP 
> conections to the server? In my architecture the FTP server is 
> firewalling itself.

Simple... find out what client port ranges your FTP server uses (see
the -U option to ftpd(8)) and then open your firewall to allow incoming
TCP packets (including setup packets) to this port range on your server.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199906081814.LAA57994>