Date: Thu, 07 Sep 2006 11:19:32 -0700 From: Noah <admin2@enabled.com> To: freebsd-questions@freebsd.org Subject: Re: rc.firewall rule for passive FTP Message-ID: <450062B4.7060001@enabled.com> In-Reply-To: <44venzu4av.fsf@be-well.ilk.org> References: <44FF4F7F.6030800@enabled.com> <44venzu4av.fsf@be-well.ilk.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Lowell Gilbert wrote:
> Noah <admin2@enabled.com> writes:
>
>
>> what is a good rule to allow passive FTP to work.
>>
>> the following rules still blocks passive FTP.
>>
>> #/** Allow setup of FTP PASSIVE **/
>> ${fwcmd} add allow tcp from any to ${ip} 49152-65534 setup
>>
>
> If the passive FTP client is on ${ip}, then that's the wrong
> direction; it needs to be able to *send* the SYN.
>
the {$ip} refers to the IP address of rthe server. might you please
help me rewrite this rule?
Cheers,
Noah
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?450062B4.7060001>