From owner-freebsd-ipfw@FreeBSD.ORG  Sat Sep  4 11:30:49 2004
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BF33A16A4CE
	for <freebsd-ipfw@freebsd.org>; Sat,  4 Sep 2004 11:30:49 +0000 (GMT)
Received: from ctb-mesg5.saix.net (ctb-mesg5.saix.net [196.25.240.77])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7EA6843D46
	for <freebsd-ipfw@freebsd.org>; Sat,  4 Sep 2004 11:30:48 +0000 (GMT)
	(envelope-from greg@propdata.co.za)
Received: from [192.168.0.6] (nngy-87-239.telkomadsl.co.za [165.165.87.239])
	by ctb-mesg5.saix.net (Postfix) with ESMTP id 73A07D5C7
	for <freebsd-ipfw@freebsd.org>; Sat,  4 Sep 2004 13:30:45 +0200 (SAST)
From: Greg Armer <greg@propdata.co.za>
To: IPFW List <freebsd-ipfw@freebsd.org>
Message-Id: <1094297495.15945.7.camel@fyre.codelounge.co.za>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.6 (1.4.6-2) 
Date: Sat, 04 Sep 2004 13:31:35 +0200
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: [Fwd: Re: Proftp ipfw rule]
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Sep 2004 11:30:49 -0000

I set up proftpd with: 

PassivePorts 10050 10080

and ipfw rules as follows,

add allow tcp from any to any established
add allow tcp from any to any 21 setup
add allow tcp from any to any 10050-10080

Works like a charm

HTH

Greg

On Sat, 2004-09-04 at 11:01, Scott Stahl wrote: 

> I need to allow access to my ftp server and am having problems.
> 
> I have the following in my proftpd.conf:
> 
> PassivePorts 49152 65534
> 
> I also have the following in my ipfw.conf:
> 
> add 02500 allow tcp from any to any 49152-65534
> 
> This doesn't seem to work unless I disable the firewall.  Any help would be
> greatly appreciated.
> 
> Scott.
> 
> 
> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"