From owner-freebsd-questions@FreeBSD.ORG Mon Sep 19 14:36:45 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C2D3416A41F for ; Mon, 19 Sep 2005 14:36:45 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail25.sea5.speakeasy.net (mail25.sea5.speakeasy.net [69.17.117.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7324C43D46 for ; Mon, 19 Sep 2005 14:36:45 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 28418 invoked from network); 19 Sep 2005 14:36:44 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail25.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 19 Sep 2005 14:36:44 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id DD3BD107; Mon, 19 Sep 2005 10:33:56 -0400 (EDT) Sender: lowell@be-well.ilk.org To: Bob Perry References: <1127014665.1597.21.camel@homey.my.domain> From: Lowell Gilbert Date: 19 Sep 2005 10:33:56 -0400 In-Reply-To: <1127014665.1597.21.camel@homey.my.domain> Message-ID: <44vf0xi0tn.fsf@be-well.ilk.org> Lines: 18 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "freebsd-questions@freebsd.org" Subject: Re: Examples of IPFtest? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "freebsd-questions@freebsd.org" List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Sep 2005 14:36:45 -0000 Bob Perry writes: > Recently set up a firewall using ipf and apparently ran into a problem > with FTP sites. Received error, "No route to host" while fetching files > located on ftp sites during portupgrade and also was unable to open the > FreeBSD FTP Server (550 Could not accept passive data connection-timed > out.) Had no problem once I disabled the firewall. > > I noticed there was a test utility called ipftest available but the man > page didn't help me understand how it functions. Has anyone utilized > this utility? Is there a site that is more informative than the man > page? > > In the mean time, I do remember scanning an article on active FTP vs > passive FTP which may be a good "next step" given the browser error > message 550. The ipf section in the Handbook has a whole subsection on dealing with FTP.