Date: Sun, 7 Nov 2004 15:22:16 +0100 From: Martin Schweizer <pcservi@spectraweb.ch> To: Ara <ara@avvali.com> Cc: freebsd-questions@freebsd.org Subject: Re: FTP access with ipfw Message-ID: <20041107142216.GY81757@saturn.pcs.ms> In-Reply-To: <20041107140217.1749C43D5A@mx1.FreeBSD.org> References: <dd9992320411070554a186ae9@mail.gmail.com> <20041107140217.1749C43D5A@mx1.FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--abYdCjSRCBwcb+dP Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello=20 I had a long time to figure out the rules for ipfw (with and without nat, n= o=20 different for me). Attached I send you the part of rc.firewall that is for = ftp: ipfw -f flush ipfw add check-state [snip] # FTP ipfw add allow tcp from any to any 20 ipfw add allow tcp from any to any 21 ipfw add allow tcp from any to any 1024-65000 keep-state [snip ] Am Sun, Nov 07, 2004 at 09:02:10AM -0500 Ara schrieb: > This mail is probably spam. The original message has been attached > along with this report, so you can recognize or block similar unwanted > mail in future. See http://spamassassin.org/tag/ for more details. >=20 > Content preview: Hello Are you connecting directly to internet or via > nat? In that case you may have to enable passive mode on your ftp > client=20 >=20 > Content analysis details: (3.60 points, 3 required) > IN_REP_TO (-0.5 points) Has a In-Reply-To header > FORGED_MUA_OUTLOOK (3.5 points) Forged mail pretending to be from MS Out= look > MISSING_OUTLOOK_NAME (0.6 points) Message looks like Outlook, but isn't >=20 >=20 Content-Description: original message before SpamAssassin > From: "Ara" <ara@avvali.com> > To: <freebsd-questions@freebsd.org> > Date: Sun, 7 Nov 2004 09:02:10 -0500 > X-Mailer: Microsoft Office Outlook, Build 11.0.6353 > Subject: RE: FTP access with ipfw >=20 >=20 > Hello > Are you connecting directly to internet or via nat? In that case you may > have to enable passive mode on your ftp client >=20 > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Emil Khatib > Sent: November 7, 2004 8:54 AM > To: freebsd-questions@freebsd.org > Subject: FTP access with ipfw >=20 > Hi, I-m trying to secure my FreeBSD box using ipfw, but i can-t > configure FTP client to access the internet. I-ve googled aroun > everywhere but none of the solutions worked for me! I-m connected > using dialup and user ppp. > And another question, Would it be better if I used the firewall > included with PPP? > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" >=20 >=20 >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 Regards Gruss Mit freundlichen Gr=FCssen Martin Schweizer <info@pc-service.ch> PC-Service M. Schweizer GmbH; Gewerbehaus Schwarz; CH-8608 Bubikon Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch; public key : http://www.pc-service.ch/pgp/public_key.asc;=20 fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239; --abYdCjSRCBwcb+dP Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQFBji+Ywa4WkdMP0jkRAqxnAKC/QaDPqnZS7yv2NcN0DS1XWPSRAACgpGbt FpgUfiD/EFV5WxDmXrp9h+0= =Vsc3 -----END PGP SIGNATURE----- --abYdCjSRCBwcb+dP--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041107142216.GY81757>