Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Jun 2001 14:43:48 -0400 (EDT)
From:      Rob Simmons <rsimmons@wlcg.com>
To:        Michael Richards <michael@fastmail.ca>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: Letting scp through a firewall using ipfilter
Message-ID:  <20010622144327.W18224-100000@mail.wlcg.com>
In-Reply-To: <3B338EFB.000039.73802@frodo.searchcanada.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Are you keeping state on the connection?

Robert Simmons
Systems Administrator
http://www.wlcg.com/

On Fri, 22 Jun 2001, Michael Richards wrote:

> I'm trying to get my firewall to allow scp through. It currently
> allows ssh in, but it appears that scp creates an outgoing connection
> from the remote machine back to the originating machine. Anyone know
> how to solve this problem?
>
> The firewall spits out:
> 22/06/2001 14:22:12.543474 xl1 @0:21 b 24.1.2.3,22 -> 216.1.2.3,1007
> PR tcp len 20 10240 -AR IN
>
> When I try to:
> scp user@24.1.2.3:/usr/home/user/filename filename
>
> I'm using ipfilter.
>
> thanks
> -Michael
> _________________________________________________________________
>      http://fastmail.ca/ - Fast Free Web Email for Canadians
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7M5Hnv8Bofna59hYRAzYwAJ9g4ZuVUIlRN9DdtNyXmavKo6N2cACfV3P4
547nmmMbMJmRGdjEhwqNHZk=
=jc7W
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010622144327.W18224-100000>