Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Jul 2006 12:49:58 -0500
From:      eculp@bafirst.com
To:        freebsd-pf@freebsd.org
Subject:   Re: enable passive/active ftp
Message-ID:  <20060728124958.opaevzcg04s0gg4s@mail.bafirst.com>
In-Reply-To: <5540790.post@talk.nabble.com>
References:  <5540790.post@talk.nabble.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Quoting elmer <elmer.rivera@gmail.com>:

>
> Hi all,
>
> I am using pf on freebsd6.1. how do I enable ftp passive and active.
> Im following the pfmanual but my users cant establish a connection.
> Is there a debugging for the ftp-proxy?
>
IIRC you need to open the following ports for pasive ftp but I could be 
wrong.  I seldom allow ftp.

# pass in on $ext_if inet proto tcp from any to ($ext_if) port 
49152:65534 flags S/SA keep state

I also redirect ftp to a non-priviledged port something like:

# rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 10021

You will need to configure your ftp daemon also and then season to 
taste and it should work.  Someone please correct me, if I've missed 
something.

ed

> tia
> cheers,
> elmer
> --
> View this message in context: 
> http://www.nabble.com/enable-passive-active-ftp-tf2015778.html#a5540790
> Sent from the freebsd-pf forum at Nabble.com.
>
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
>






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060728124958.opaevzcg04s0gg4s>