Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Apr 2000 04:54:41 +0300
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Scott Graves <sgraves66@home.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: NATD and IPFW
Message-ID:  <20000412045440.A16060@hades.hell.gr>
In-Reply-To: <38F3BFB3.71F840FA@home.com>; from sgraves66@home.com on Tue, Apr 11, 2000 at 07:13:39PM -0500
References:  <38F3BFB3.71F840FA@home.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 11, 2000 at 07:13:39PM -0500, Scott Graves wrote:
> 
> I am able to connect to FTP sites, but not dn/up or list files without
> receiving this error. This is what I have in rc.firewall which should
> allow for FTP access:
> 
>          # Allow FTP connections
>          ${fwcmd} add pass tcp from any to any 21 setup
>          ${fwcmd} add pass tcp from any to any 20 setup

I think you have the second rule's port numbers reversed.
Try changing this to:

           # Allow FTP connections
           ${fwcmd} add pass tcp from any to any 21 setup
           ${fwcmd} add pass tcp from any 20 to any setup

Unless I got the whole FTP thing wrong, when you ftp to some server's
port 21, the server will use *his* port 20 to connect back to a random
port of yours.

Ciao,
Giorgos Keramidas.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000412045440.A16060>