Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 10 Sep 2005 16:43:51 +0200
From:      "Peter Rosa" <prosa@pro.sk>
To:        "FreeBSD IPFW" <freebsd-ipfw@freebsd.org>
Subject:   IPFW2+NAT stateful rules VS. FTP
Message-ID:  <001501c5b616$0fb62c20$3501a8c0@pro.sk>

next in thread | raw e-mail | index | archive | help
Hello everybody,

please can anybody help me with ipfw rules?

My machine is acting as firewall/router/www-proxy/ftp-proxy for small LAN.
It does not work as ftp-server. It does NAT for internal LAN.

I set my ipfw2 rules exactly as in section "25.6.5.7 An Example NAT and
Stateful Ruleset" Ex.2 from handbook.
Everything works well except miserable ftp. I just installed ports/jftpgw to
be an transparent proxy for internal LAN but still without success.

I understand all rules in those example, but I do not know where should
I place fwd rule(s). Ftp depends on two ports 20 and 21. So i assume
there should be two fwd rules semewhere in the ruleset.
Please, where should I place those rules?

Or is it better to use /etc/nad.conf to redirect all incomming connections
on ports 20 and 21 to localhost?

Any help is *very* appreciated :-)

Peter Rosa



P.S. Please consider adding such rules into mentioned example in handbook.
        I think a lot of users will welcome such addition. I spent four days
        on Goooogle before writing here and I did not find anything helpful.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001501c5b616$0fb62c20$3501a8c0>