Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Feb 2020 22:30:24 +0100
From:      Kristof Provost <kp@freebsd.org>
To:        Andreas X <hamdi20193d@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ipfw for udp on FreeBSD 12.1?
Message-ID:  <20200205213024.GA9143@vega.codepro.be>
In-Reply-To: <CAEW8WPvyNLz%2Bwthr7aBPwTb9wh=E3skm2Qy2pS2BK0QcXN_MMg@mail.gmail.com>
References:  <CAEW8WPvyNLz%2Bwthr7aBPwTb9wh=E3skm2Qy2pS2BK0QcXN_MMg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2020-02-06 00:21:10 (+0300), Andreas X <hamdi20193d@gmail.com> wrote:
> Hello.
> 
> I use ipfw with options such as: firewall_type="workstation" and
> firewall_myservices="21 22 80 443" for my server via rc.conf file.
> 
> I need to add an UDP port range to allow, for vsftpd (PASV). However ipfw
> doesn't has any settings as I heard and "firewall_myservices" only supports
> TCP ports. Any idea how to manage that issue?
> 
> The internet has a lot of tutorials for adding "firewall_myservices_tcp"
> "firewall_myservices_udp" support, none of them worked for 12.1
> 
> And, anyone got any idea why FreeBSD 10 supports such tags for IPFW, but
> 12.1 not?
> 
> https://svnweb.freebsd.org/base/head/etc/rc.firewall?view=markup&pathrev=273201

I'd expect firewall_myservices="53/udp" to open UDP port 53.

As per that commit message you should update your existing services to
be 21/tcp and such.

Regards,
Kristof



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200205213024.GA9143>