From owner-freebsd-questions@FreeBSD.ORG Thu May 20 15:10:15 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 749BE1065675 for ; Thu, 20 May 2010 15:10:15 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail5.sea5.speakeasy.net (mail5.sea5.speakeasy.net [69.17.117.49]) by mx1.freebsd.org (Postfix) with ESMTP id 4DC158FC0A for ; Thu, 20 May 2010 15:10:15 +0000 (UTC) Received: (qmail 31505 invoked from network); 20 May 2010 15:10:14 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail5.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 20 May 2010 15:10:14 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id A1E975082F; Thu, 20 May 2010 11:10:11 -0400 (EDT) From: Lowell Gilbert To: gahn References: <111263.90106.qm@web52308.mail.re2.yahoo.com> Date: Thu, 20 May 2010 11:10:11 -0400 In-Reply-To: <111263.90106.qm@web52308.mail.re2.yahoo.com> (gahn's message of "Thu, 20 May 2010 07:59:33 -0700 (PDT)") Message-ID: <44iq6i8v8s.fsf@be-well.ilk.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd security , freebsd general questions Subject: Re: ftp passive mode X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-questions@freebsd.org List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 May 2010 15:10:15 -0000 gahn writes: > I am behind firewall and only pass ftp sessions are allowed. With that, most ftp sessions of portupgrade would not be able to connect to remote FreeBSD sites. > > Could I reconfigure the my FreeBSD 7.3 in a way so that it would only start ftp sessions in PASV mode? That should already be the default; FETCH_ARGS should be set to "-ApRr" in /etc/ports/Mk/bsd.port.mk (the 'p' option is what means "passive" mode). It certainly works for me, and has for many years. You can test by setting FTP_PASSIVE_MODE (to anything *except* "no") in the environment.