Date: Sun, 29 Dec 2002 03:28:58 +0100 From: Alex <freebsd@akruijff.dds.nl> To: Alexander Yeremenko <ay@sita.kiev.ua> Cc: fbsd-ipfw@sita.kiev.ua Subject: Re: ftpd through firewall Message-ID: <17452083522.20021229032858@dds.nl> In-Reply-To: <20021214131949.A54596@sita.kiev.ua> References: <200212141115.gBEBFh754575@sima.sita.kiev.ua> <20021214131949.A54596@sita.kiev.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
Dear/Beste Alexander,
Saturday, December 14, 2002, 12:20:26 PM, you wrote:
> I have a box, running lukemftpd with rc.firewall, containing:
> ${ipfw} add pass all from me to any
> ${ipfw} add pass tcp from any to me ftp
> ${ipfw} add pass udp from any to me
> When trying to execute ls or get from remote server session hungs
> in a state SYN_SENT, even if ftp -p executes.
192.168.31.48.4909 > unix1.ftp
unix1.ftp > 192.168.31.48.4909
192.168.31.48.4909 > unix1.ftp
unix1.ftp-data > 192.168.31.48.4912
192.168.31.48.4912 > unix1.ftp-data
unix1.ftp-data > 192.168.31.48.4912
unix1.ftp > 192.168.31.48.4909
unix1.ftp > 192.168.31.48.4909
unix1.ftp-data > 192.168.31.48.4912
192.168.31.48.4909 > unix1.ftp
192.168.31.48.4912 > unix1.ftp-data
192.168.31.48.4912 > unix1.ftp-data
unix1.ftp-data > 192.168.31.48.4912
Using tcpdump i got these packages for a ls with ftp. So you need to
pass two ports for normal ftp usages.
> ${ipfw} add pass all from me to any
> ${ipfw} add pass tcp from any to me ftp
> ${ipfw} add pass udp from any to me
Why do you allowing udp to pass unconditional?
--
Best regards/Met vriendelijke groet,
Alex
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17452083522.20021229032858>