From owner-freebsd-bugs@FreeBSD.ORG Sun Dec 11 12:10:24 2011 Return-Path: Delivered-To: freebsd-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 28447106566B for ; Sun, 11 Dec 2011 12:10:24 +0000 (UTC) (envelope-from vip71541@gmail.com) Received: from mail-gy0-f182.google.com (mail-gy0-f182.google.com [209.85.160.182]) by mx1.freebsd.org (Postfix) with ESMTP id E0FB18FC12 for ; Sun, 11 Dec 2011 12:10:23 +0000 (UTC) Received: by ghbg20 with SMTP id g20so4345977ghb.13 for ; Sun, 11 Dec 2011 04:10:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=2p3W5QWXAMG6DYni0BHGvsLVEbx2Xm1F99G20sIiPXU=; b=irpg51x9bV44azmFM1f4jhXhdHASEcpDA7PHX6OUNDMzAbzsDQJi7mG4Pv/zDBmoL7 JFUgdPL6wg9efx4r3rrvuPMLisjt9UiB71w3wQzcL8p8O724SRGhBVQfetz70QHUQOdD SBUdJ/DuZZj1E9N+zjsGsBO+uht0YBejOnjIU= MIME-Version: 1.0 Received: by 10.236.189.97 with SMTP id b61mr20602397yhn.116.1323603897617; Sun, 11 Dec 2011 03:44:57 -0800 (PST) Received: by 10.236.128.241 with HTTP; Sun, 11 Dec 2011 03:44:57 -0800 (PST) Date: Sun, 11 Dec 2011 13:44:57 +0200 Message-ID: From: vip 71541 To: freebsd-bugs@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Problem with passive ftp in IPFW! X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Dec 2011 12:10:24 -0000 Good afternoon, everybody. My name is Eugene. I know that not a new issue ... But there is a problem as competently / properly write the rules for passive ftp in ipfw on a gateway for my LAN. Gateway running Freebsd 8.2p4. For kernal NAT. Now goes to the local network FTP on such rules here: 00159 0 0 skipto 65000 tcp from 192.168.10.0/24 to any dst-port21,1024-65535 out xmit em0 keep-state -- 00211 skipto 65000 tcp from any 21,1024-65535 to ${wan_ip} in recv em0 -- 65000 0 0 nat 90 ip from any to any via em0 --- Are there any in ipfw analogue state RELATED in IPTABLES. As an intelligent man ipfw how to open his information was not found. So, would not open the ports above 1024 ... But somehow not very good firewall such as leaves and there is sort of not ... This kernel is compiled with options such: # *IPFW* options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE=100 options IPFIREWALL_FORWARD options IPFIREWALL_NAT options LIBALIAS options IPDIVERT options DUMMYNET options HZ=1000 P.S And plan to add such a state in the next version of freebsd? Thank you for your attention. I will wait your reply