Date: Wed, 13 Jun 2001 16:33:01 +0200 From: "Marcel Dijk" <nascar24@home.nl> To: "alex" <ml-freebsd-security@phobgate.de>, <freebsd-security@FreeBSD.ORG> Subject: Re: IPFW almost works now. (fwd) - correction Message-ID: <02ba01c0f415$bfeb3fd0$0900a8c0@windows> References: <252254257.992389699@[192.168.2.94]>
next in thread | previous in thread | raw e-mail | index | archive | help
> correct setup for active ftp: > > allow incoming packages with destination port 20 and 21 > allow outgoing packages with source port 20 and 21 ________________________________________ 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00220 divert 8668 ip from any to any via ed0 00400 deny ip from 127.0.0.0/8 to any 00615 allow tcp from any to MY_IP 22,5617,10000 I have done the first part -> opend the port required for FTP (only a different port than normal) 00625 allow tcp from MY_IP to any 00650 allow udp from any to MY_IP 00700 allow udp from MY_IP to any As far as I know, these lines make it possible for my server to connect to everyone on every port. 00750 allow icmp from MY_IP to any 00800 allow icmp from any to MY_IP 00850 allow ip from 192.168.0.0/16 to any 00900 allow ip from any to 192.168.0.0/16 65535 deny ip from any to any ________________________________________ (MY_IP is my public/internet IP) Marcel To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?02ba01c0f415$bfeb3fd0$0900a8c0>