From owner-freebsd-security  Tue Jun 26  4:41:24 2001
Delivered-To: freebsd-security@freebsd.org
Received: from burka.carrier.kiev.ua (burka.carrier.kiev.ua [193.193.193.107])
	by hub.freebsd.org (Postfix) with ESMTP id 5588937B407
	for <freebsd-security@FreeBSD.ORG>; Tue, 26 Jun 2001 04:41:17 -0700 (PDT)
	(envelope-from netch@lucky.net)
Received: from netch@localhost (netch@localhost)
	by burka.carrier.kiev.ua  id OPU35832;
	Tue, 26 Jun 2001 14:41:04 +0300 (EEST)
	(envelope-from netch)
Date: Tue, 26 Jun 2001 14:41:04 +0300
From: Valentin Nechayev <netch@lucky.net>
To: Michael Richards <michael@fastmail.ca>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: Letting scp through a firewall using ipfilter
Message-ID: <20010626144104.C33308@lucky.net>
Reply-To: netch@lucky.net
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3B338EFB.000039.73802@frodo.searchcanada.ca>
X-42: On
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

 Fri, Jun 22, 2001 at 14:31:23, michael wrote about "Letting scp through a firewall using ipfilter": 

> I'm trying to get my firewall to allow scp through. It currently 
> allows ssh in, but it appears that scp creates an outgoing connection 
> from the remote machine back to the originating machine. Anyone know 
> how to solve this problem?

scp does not create such connection. You mixed it with ftp in active mode.


/netch

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message