Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 29 Jul 2006 01:07:28 +0200
From:      Max Laier <max@love2party.net>
To:        freebsd-pf@freebsd.org
Subject:   Re: enable passive/active ftp
Message-ID:  <200607290107.34701.max@love2party.net>
In-Reply-To: <20060728124958.opaevzcg04s0gg4s@mail.bafirst.com>
References:  <5540790.post@talk.nabble.com> <20060728124958.opaevzcg04s0gg4s@mail.bafirst.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1536157.Gnv5t98K0A
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Friday 28 July 2006 19:49, eculp@bafirst.com wrote:
> Quoting elmer <elmer.rivera@gmail.com>:
> > Hi all,
> >
> > I am using pf on freebsd6.1. how do I enable ftp passive and active.
> > Im following the pfmanual but my users cant establish a connection.
> > Is there a debugging for the ftp-proxy?
>
> IIRC you need to open the following ports for pasive ftp but I could be
> wrong.  I seldom allow ftp.
>
> # pass in on $ext_if inet proto tcp from any to ($ext_if) port
> 49152:65534 flags S/SA keep state
>
> I also redirect ftp to a non-priviledged port something like:
>
> # rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 10021
>
> You will need to configure your ftp daemon also and then season to
> taste and it should work.  Someone please correct me, if I've missed
> something.

I suggest looking at ftp/pftpx from ports.  It is much better than the=20
ftp-proxy we have in base and (iff I finally get round to finishing a new=20
import from OpenBSD) will eventually replace the version in base.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1536157.Gnv5t98K0A
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (FreeBSD)

iD8DBQBEypi2XyyEoT62BG0RAjERAJ9U33MTfpEYka38I89AXOE1vmHxTgCfcpwy
nh4Q3pu4sOQ39baS4GupPSM=
=EsvU
-----END PGP SIGNATURE-----

--nextPart1536157.Gnv5t98K0A--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200607290107.34701.max>