From owner-freebsd-questions@FreeBSD.ORG Tue Sep 20 05:49:09 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A03F016A41F for ; Tue, 20 Sep 2005 05:49:09 +0000 (GMT) (envelope-from rperry@gti.net) Received: from apollo.gti.net (apollo.gti.net [199.171.27.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD0AE43D5F for ; Tue, 20 Sep 2005 05:49:08 +0000 (GMT) (envelope-from rperry@gti.net) Received: from homey.my.domain (ts6m-pool0-123.gti.net [208.216.115.123]) by apollo.gti.net (mail) with ESMTP id 3B6E636229 for ; Tue, 20 Sep 2005 01:46:45 -0400 (EDT) From: Bob Perry To: "freebsd-questions@freebsd.org" In-Reply-To: <44vf0xi0tn.fsf@be-well.ilk.org> References: <1127014665.1597.21.camel@homey.my.domain> <44vf0xi0tn.fsf@be-well.ilk.org> Content-Type: text/plain Date: Tue, 20 Sep 2005 01:48:54 -0400 Message-Id: <1127195334.777.9.camel@homey.my.domain> Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 FreeBSD GNOME Team Port Content-Transfer-Encoding: 7bit Subject: Re: Examples of IPFtest? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Sep 2005 05:49:09 -0000 On Mon, 2005-09-19 at 10:33 -0400, Lowell Gilbert wrote: > Bob Perry writes: > > > Recently set up a firewall using ipf and apparently ran into a problem > > with FTP sites. Received error, "No route to host" while fetching files > > located on ftp sites during portupgrade and also was unable to open the > > FreeBSD FTP Server (550 Could not accept passive data connection-timed > > out.) Had no problem once I disabled the firewall. > > > > I noticed there was a test utility called ipftest available but the man > > page didn't help me understand how it functions. Has anyone utilized > > this utility? Is there a site that is more informative than the man > > page? > > > > In the mean time, I do remember scanning an article on active FTP vs > > passive FTP which may be a good "next step" given the browser error > > message 550. > > The ipf section in the Handbook has a whole subsection on dealing with FTP. Read a lot today and when I went back to the handbook, everything seemed to fall into place. Not sure I understand it all yet, but... Thanks, Bob