From owner-freebsd-questions@FreeBSD.ORG Sun Nov 7 17:53:42 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 07E5A16A4CE for ; Sun, 7 Nov 2004 17:53:42 +0000 (GMT) Received: from mail1.bluewin.ch (mail1.bluewin.ch [195.186.1.74]) by mx1.FreeBSD.org (Postfix) with ESMTP id 88AC943D2F for ; Sun, 7 Nov 2004 17:53:41 +0000 (GMT) (envelope-from martin@saturn.pcs.ms) Received: from saturn.pcs.ms (81.62.24.201) by mail1.bluewin.ch (Bluewin AG 7.0.030.2) id 41863EE900097F5E; Sun, 7 Nov 2004 17:53:35 +0000 Received: from saturn.pcs.ms (localhost [127.0.0.1]) by saturn.pcs.ms (8.12.11/8.12.11) with ESMTP id iA7HtOc2096977; Sun, 7 Nov 2004 18:55:24 +0100 (CET) (envelope-from martin@saturn.pcs.ms) Received: (from martin@localhost) by saturn.pcs.ms (8.12.11/8.12.11/Submit) id iA7HtOYY096976; Sun, 7 Nov 2004 18:55:24 +0100 (CET) (envelope-from martin) Date: Sun, 7 Nov 2004 18:55:24 +0100 From: Martin Schweizer To: Emil Khatib Message-ID: <20041107175524.GA96933@saturn.pcs.ms> Mail-Followup-To: Emil Khatib , freebsd-questions@freebsd.org References: <20041107140217.1749C43D5A@mx1.FreeBSD.org> <20041107142216.GY81757@saturn.pcs.ms> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i Organization: PC-Service M. Schweizer GmbH, CH-8608 Bubikon, Switzerland X-PGP-Key: http://www.pc-service.ch/pgp/public_key.asc X-Fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239 X-Spam-Status: No, hits=-7.0 required=3.0 tests=IN_REP_TO,PGP_SIGNATURE_2,QUOTED_EMAIL_TEXT,REFERENCES, REPLY_WITH_QUOTES,USER_AGENT_MUTT version=2.55 X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) cc: freebsd-questions@freebsd.org Subject: Re: FTP access with ipfw X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Martin Schweizer List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2004 17:53:42 -0000 --pf9I7BMVVzbSWLtt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello Emil Am Sun, Nov 07, 2004 at 03:27:02PM +0100 Emil Khatib schrieb: > ipfw add allow tcp from any to any 1024-65000 keep-state > is it secure to open those ports? =2E.. if no service is running there I see no problems. =20 > On Sun, 7 Nov 2004 15:22:16 +0100, Martin Schweizer > wrote: > > Hello > >=20 > > I had a long time to figure out the rules for ipfw (with and without na= t, no > > different for me). Attached I send you the part of rc.firewall that is = for ftp: > >=20 > > ipfw -f flush > > ipfw add check-state > >=20 > > [snip] > >=20 > > # FTP > > ipfw add allow tcp from any to any 20 > > ipfw add allow tcp from any to any 21 > > ipfw add allow tcp from any to any 1024-65000 keep-state > >=20 > > [snip ] > >=20 > > Am Sun, Nov 07, 2004 at 09:02:10AM -0500 Ara schrieb: > > > This mail is probably spam. The original message has been attached > > > along with this report, so you can recognize or block similar unwanted > > > mail in future. See http://spamassassin.org/tag/ for more details. > > > > > > Content preview: Hello Are you connecting directly to internet or via > > > nat? In that case you may have to enable passive mode on your ftp > > > client > > >=20 > > > Content analysis details: (3.60 points, 3 required) > > > IN_REP_TO (-0.5 points) Has a In-Reply-To header > > > FORGED_MUA_OUTLOOK (3.5 points) Forged mail pretending to be from MS= Outlook > > > MISSING_OUTLOOK_NAME (0.6 points) Message looks like Outlook, but is= n't > > > > > > > >=20 > > Content-Description: original message before SpamAssassin > > > From: "Ara" > > > To: > > > Date: Sun, 7 Nov 2004 09:02:10 -0500 > > > X-Mailer: Microsoft Office Outlook, Build 11.0.6353 > > > Subject: RE: FTP access with ipfw > >=20 > >=20 > > > > > > > > > Hello > > > Are you connecting directly to internet or via nat? In that case you = may > > > have to enable passive mode on your ftp client > > > > > > -----Original Message----- > > > From: owner-freebsd-questions@freebsd.org > > > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Emil Khatib > > > Sent: November 7, 2004 8:54 AM > > > To: freebsd-questions@freebsd.org > > > Subject: FTP access with ipfw > > > > > > Hi, I-m trying to secure my FreeBSD box using ipfw, but i can-t > > > configure FTP client to access the internet. I-ve googled aroun > > > everywhere but none of the solutions worked for me! I-m connected > > > using dialup and user ppp. > > > And another question, Would it be better if I used the firewall > > > included with PPP? --=20 Regards Martin Schweizer PC-Service M. Schweizer GmbH; Gewerbehaus Schwarz; CH-8608 Bubikon Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch; public key : http://www.pc-service.ch/pgp/public_key.asc;=20 fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239; --pf9I7BMVVzbSWLtt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQFBjmGMwa4WkdMP0jkRAvFBAKCd5XTvj+CB0z9BnFSIucdTPh2zDQCg6LQQ HRL+lK4Xr9KvSgor1r52vAo= =gC+v -----END PGP SIGNATURE----- --pf9I7BMVVzbSWLtt--