Skip site navigation (1)Skip section navigation (2)
Date:      21 Sep 2005 17:01:56 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        ann kok <annkok2001@yahoo.com>,  freebsd-questions@freebsd.org
Subject:   Re: pls help for ipfw
Message-ID:  <44aci6b0e3.fsf@be-well.ilk.org>
In-Reply-To: <B8D4FCC6-584A-419B-A767-263248E011AE@mac.com>
References:  <20050921202013.15670.qmail@web53305.mail.yahoo.com> <B8D4FCC6-584A-419B-A767-263248E011AE@mac.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Charles Swiger <cswiger@mac.com> writes:

> On Sep 21, 2005, at 4:20 PM, ann kok wrote:
> > my rules:
> >
> > ipfw add allow udp from any to tftpserverip
> > ipfw add allow udp from tftpserverip to any
> >
> > In the freebsd box, I can access tftp server but
> > internal users is hanging in the "get" state
> 
> TFTP may also use TCP:
> 
> % grep tftp /etc/services
> tftp             69/udp     # Trivial File Transfer
> tftp             69/tcp     # Trivial File Transfer

Except that it doesn't.  The port is reserved to avoid confusion, but
the TFTP protocol doesn't run on TCP.

NAT is probably hanging things up.  I think that all that's needed is
to "add-state" on the outgoing TFTP rule.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
		http://be-well.ilk.org/~lowell/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44aci6b0e3.fsf>