Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Oct 2002 17:33:03 -0400
From:      <tristan11@mindspring.com>
To:        freebsd-questions@freebsd.org
Subject:   re: ipfw rules
Message-ID:  <Springmail.0994.1034371983.0.54062400@webmail.atl.earthlink.net>

next in thread | raw e-mail | index | archive | help
i was finally able to get ftp (using passive ftp) to work through our
firewall.  these are the rules I had to add:

# /sbin/ipfw 10000 allow tcp from any 1024-65535 to any 21 out setup
keep-state
# /sbin/upfw 10001 allow tco from any 1024-65535 to any 1024-65535 setup
keep-state

the first rule (10000) allows our server to connect via any high port to any
server out there on port 21(ftp).  this is to initiate the 'control
connection'.

the second rule (10001) allows anyone to connect via high ports to and from
our server.  this is for the data transfer part.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Springmail.0994.1034371983.0.54062400>