Date: Wed, 11 Mar 2009 18:10:03 GMT From: Maxim Konovalov <maxim@macomnet.ru> To: freebsd-bugs@FreeBSD.org Subject: Re: misc/132553: ipfw doesnt understand ftp-data port Message-ID: <200903111810.n2BIA3Ba013650@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR misc/132553; it has been noted by GNATS. From: Maxim Konovalov <maxim@macomnet.ru> To: Chistoph Weber-Fahr <cwf-ml@arcor.de> Cc: bug-followup@freebsd.org Subject: Re: misc/132553: ipfw doesnt understand ftp-data port Date: Wed, 11 Mar 2009 21:04:09 +0300 (MSK) > >Description: > this ipfw clause should work and did work on older systems: > > # ipfw add 1770 allow tcp from any to any ftp-data keep-state > > but now it produces > > ipfw: unrecognised option [-1] ftp-data > > this is regardless of the addresses used - you could also use any addresses or networks instead of "any". > > ftp-data is in /etc/services as always: > > # grep ftp-data /etc/services > ftp-data 20/tcp #File Transfer [Default Data] > ftp-data 20/udp #File Transfer [Default Data] > > $ ipfw -n add 1770 allow tcp from any to any ftp\\-data keep-state 01770 allow tcp from any to any dst-port 20 keep-state works for me. -- Maxim Konovalov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200903111810.n2BIA3Ba013650>