Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Aug 2002 19:54:10 -0600
From:      "Grant Cooper" <grant.cooper@nucleus.com>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   IPFW & FTP
Message-ID:  <006501c2426c$51858040$2afececd@TCOOPER>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_0062_01C2423A.0653B240
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Some basic rules

add 10 allow all from any to any via lo0 in
add 10 allow all from any to any via lo0 out

#masquerade internel traffic
add 40 divert natd all from any to any via <externel>
add 45 allow tcp from any to any established

add 270 allow tcp from any 20,21 to any $UNPRIVPORTS

But when I ftp I get some problems. I can "put" the files in fine but =
when I "get" the client & server negotiate using $UNPRIVPORTS to =
communicate with each other. For example ( port 3123 <-> port 2342 ). I =
was hoping rule 45 would fix this.

------=_NextPart_000_0062_01C2423A.0653B240
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2716.2200" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT face=3DArial size=3D2>Some basic rules</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>add 10 allow all from any to any via =
lo0=20
in</FONT></DIV>
<DIV>
<DIV><FONT face=3DArial size=3D2>add 10 allow all from any to any via =
lo0=20
out</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>#masquerade internel =
traffic</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>add 40 divert natd all from any to any =
via=20
&lt;externel&gt;</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>add 45 allow tcp from any to any=20
established</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>add 270 allow tcp from any 20,21 to any =

$UNPRIVPORTS</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>But when I ftp I get some problems. I can "put" the files in fine =
but when=20
I "get" the client &amp; server&nbsp;negotiate using $UNPRIVPORTS to =
communicate=20
with each other. For example (&nbsp;port 3123 &lt;-&gt; port 2342 ). I =
was=20
hoping rule 45 would fix this.</DIV></DIV></FONT></DIV></BODY></HTML>

------=_NextPart_000_0062_01C2423A.0653B240--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?006501c2426c$51858040$2afececd>