From owner-freebsd-security  Tue Jun 12 13:43:29 2001
Delivered-To: freebsd-security@freebsd.org
Received: from imr1.ericy.com (imr1.ericy.com [208.237.135.240])
	by hub.freebsd.org (Postfix) with ESMTP id AE13337B401
	for <freebsd-security@FreeBSD.ORG>; Tue, 12 Jun 2001 13:43:23 -0700 (PDT)
	(envelope-from Antoine.Beaupre@ericsson.ca)
Received: from mr7.exu.ericsson.se (mr7u3.ericy.com [208.237.135.122])
	by imr1.ericy.com (8.11.3/8.11.3) with ESMTP id f5CKhFa09050;
	Tue, 12 Jun 2001 15:43:15 -0500 (CDT)
Received: from noah.lmc.ericsson.se (noah.lmc.ericsson.se [142.133.1.1])
	by mr7.exu.ericsson.se (8.11.3/8.11.3) with ESMTP id f5CKhEU29561;
	Tue, 12 Jun 2001 15:43:14 -0500 (CDT)
Received: from lmc35.lmc.ericsson.se (lmc35.lmc.ericsson.se [142.133.16.175])
	by noah.lmc.ericsson.se (8.11.2/8.9.2) with ESMTP id f5CKhDG02027;
	Tue, 12 Jun 2001 16:43:13 -0400 (EDT)
Received: by lmc35.lmc.ericsson.se with Internet Mail Service (5.5.2653.19)
	id <MY4PXWP0>; Tue, 12 Jun 2001 16:43:12 -0400
Received: from lmc.ericsson.se (lmcpc100455.pc.lmc.ericsson.se [142.133.23.150]) by LMC37.lmc.ericsson.se with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
	id MY4P5ST4; Tue, 12 Jun 2001 16:43:08 -0400
From: "Antoine Beaupre (LMC)" <Antoine.Beaupre@ericsson.ca>
To: "Thomas T. Veldhouse" <veldy@veldy.net>
Cc: Jason DiCioccio <Jason.DiCioccio@Epylon.com>,
	freebsd-security@FreeBSD.ORG
Message-ID: <3B267EDA.9070605@lmc.ericsson.se>
Date: Tue, 12 Jun 2001 16:43:06 -0400
Organization: LMC, Ericsson Research Canada
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9.1) Gecko/20010607
X-Accept-Language: en,fr-CA,fr
MIME-Version: 1.0
Subject: Re: IPFW almost works now.
References: <657B20E93E93D4118F9700D0B73CE3EA0166D97D@goofy.epylon.lan> <01fe01c0f37e$c5948e10$3028680a@tgt.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Thomas T. Veldhouse wrote:

> No you don't.  My servers run fine for active and I DON'T allow access to
> all inbound above 1024.


But you do need to allow outbound above 1024, right?

 
> Open up tcp/20 and tcp/21 statefully and you will be rocking and rolling.


yee-ha.


--
La sémantique est la gravité de l'abstraction.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message