From owner-freebsd-security@FreeBSD.ORG  Sat Dec 18 12:44:48 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E3AEE16A4CE
	for <freebsd-security@freebsd.org>;
	Sat, 18 Dec 2004 12:44:48 +0000 (GMT)
Received: from virtual.micronet.sk (smtp-r3.micronet.sk [213.215.96.238])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 79F5443D49
	for <freebsd-security@freebsd.org>;
	Sat, 18 Dec 2004 12:44:46 +0000 (GMT)
	(envelope-from danger@wilbury.sk)
Received: from localhost (localhost [127.0.0.1])
	by virtual.micronet.sk (Postfix) with ESMTP id 6A35610E54D;
	Sat, 18 Dec 2004 13:52:36 +0100 (CET)
Received: from virtual.micronet.sk ([127.0.0.1])
 by localhost (virtual.micronet.sk [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 24293-12; Sat, 18 Dec 2004 13:52:32 +0100 (CET)
Received: from danger.mcrn.sk (danger.mcrn.sk [84.16.37.254])
	by virtual.micronet.sk (Postfix) with ESMTP id 56F8710E533;
	Sat, 18 Dec 2004 13:52:27 +0100 (CET)
Date: Sat, 18 Dec 2004 13:43:55 +0100
From: DanGer <danger@wilbury.sk>
X-Mailer: The Bat! (v3.0.1.33) Professional
X-Priority: 3 (Normal)
Message-ID: <12410554059.20041218134355@wilbury.sk>
To: wsx <security@noc.kstu-kai.ru>, freebsd-security@freebsd.org
In-Reply-To: <200412181518.55782.security@noc.kstu-kai.ru>
References: <200412181518.55782.security@noc.kstu-kai.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at virtual.micronet.sk
Subject: Re: Active ftp connection
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: DanGer <danger@wilbury.sk>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Dec 2004 12:44:49 -0000

Hello wsx,

Saturday, December 18, 2004, 1:18:55 PM, si napisal:

> Hello dear friends...

> I have a trouble. My FTP server must have an active ftp connection.
> It means what in ipfw rules I must allow outgoing connections(like ipfw add
> allow tcp from me to any keep-state).
> But I don't want use this rule. I want to restrict my outgoing connections. Is
> FreeBSD have a feature for this situation?

  what about allowing these outgoing connection only for ftpd's port?

> P.S. 
>         Only for test we developed little root-kit, which can use only outgoing
> connections. example:
> 1. rootkit gets a command from remote machine
> 2. do this command.
> 3. connects to remote machine and returns result.
> So we havn't got connections to my server, only outgoing..

> Best regards..

-- 
CU soon

+----------==/\/\==----------+       (__)      FreeBSD
| DanGer <danger@wilbury.sk> |    \\\'',)      The
| DanGer@IRCnet ICQ261701668 |      \/  \ ^    Power
| http://danger.homeunix.org |      .\._/_)    To
+----------==\/\/==----------+                 Serve