From owner-freebsd-security  Fri Jun 22 11:44: 7 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4])
	by hub.freebsd.org (Postfix) with ESMTP id 2221E37B408
	for <freebsd-security@FreeBSD.ORG>; Fri, 22 Jun 2001 11:44:04 -0700 (PDT)
	(envelope-from rsimmons@wlcg.com)
Received: from localhost (rsimmons@localhost)
	by mail.wlcg.com (8.11.4/8.11.4) with ESMTP id f5MIhpu21900;
	Fri, 22 Jun 2001 14:43:51 -0400 (EDT)
	(envelope-from rsimmons@wlcg.com)
Date: Fri, 22 Jun 2001 14:43:48 -0400 (EDT)
From: Rob Simmons <rsimmons@wlcg.com>
To: Michael Richards <michael@fastmail.ca>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: Letting scp through a firewall using ipfilter
In-Reply-To: <3B338EFB.000039.73802@frodo.searchcanada.ca>
Message-ID: <20010622144327.W18224-100000@mail.wlcg.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Are you keeping state on the connection?

Robert Simmons
Systems Administrator
http://www.wlcg.com/

On Fri, 22 Jun 2001, Michael Richards wrote:

> I'm trying to get my firewall to allow scp through. It currently
> allows ssh in, but it appears that scp creates an outgoing connection
> from the remote machine back to the originating machine. Anyone know
> how to solve this problem?
>
> The firewall spits out:
> 22/06/2001 14:22:12.543474 xl1 @0:21 b 24.1.2.3,22 -> 216.1.2.3,1007
> PR tcp len 20 10240 -AR IN
>
> When I try to:
> scp user@24.1.2.3:/usr/home/user/filename filename
>
> I'm using ipfilter.
>
> thanks
> -Michael
> _________________________________________________________________
>      http://fastmail.ca/ - Fast Free Web Email for Canadians
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7M5Hnv8Bofna59hYRAzYwAJ9g4ZuVUIlRN9DdtNyXmavKo6N2cACfV3P4
547nmmMbMJmRGdjEhwqNHZk=
=jc7W
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message