Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 May 2003 15:51:16 +0700 (ICT)
From:      Olivier Nicole <on@cs.ait.ac.th>
Cc:        questions@freebsd.org
Subject:   Re: proftpd/ipfw issues
Message-ID:  <200305300851.PAA10610@banyan.cs.ait.ac.th>
In-Reply-To: <1054284113.36640.21.camel@enigma.8ball.co.za> (message from Nelis Lamprecht on 30 May 2003 10:41:53 %2B0200)
References:  <1054284113.36640.21.camel@enigma.8ball.co.za>

next in thread | previous in thread | raw e-mail | index | archive | help
> allow tcp from any to x.x.x.x/24 20,21,22,25,53,80,443 setup

On ACTIVE FTP, the client initiate the connection to the port 21, but
the server initiate the connection from the port 20.

So you should open the port 20 with a rule like:

allow tcp from x.x.x.x/24 20 to any setup

Beside, if you have only one server on your network, why opening
incoming ftp to all the subnet?

Olivier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200305300851.PAA10610>