Date: Thu, 07 Sep 2006 10:42:00 -0400 From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> To: Noah <admin2@enabled.com> Cc: freebsd-questions@freebsd.org Subject: Re: rc.firewall rule for passive FTP Message-ID: <44venzu4av.fsf@be-well.ilk.org> In-Reply-To: <44FF4F7F.6030800@enabled.com> (Noah's message of "Wed, 06 Sep 2006 15:45:19 -0700") References: <44FF4F7F.6030800@enabled.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Noah <admin2@enabled.com> writes:
> what is a good rule to allow passive FTP to work.
>
> the following rules still blocks passive FTP.
>
> #/** Allow setup of FTP PASSIVE **/
> ${fwcmd} add allow tcp from any to ${ip} 49152-65534 setup
If the passive FTP client is on ${ip}, then that's the wrong
direction; it needs to be able to *send* the SYN.
--
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44venzu4av.fsf>