Date: Fri, 10 Oct 2008 09:51:16 -0700 From: Jeremy Chadwick <koitsu@FreeBSD.org> To: John Almberg <jalmberg@identry.com> Cc: freebsd-questions@freebsd.org Subject: Re: Firewall and FreeBSD ports Message-ID: <20081010165116.GA37287@icarus.home.lan> In-Reply-To: <110C2D5E-5772-4304-9F90-FDAC5EACAE2E@identry.com> References: <110C2D5E-5772-4304-9F90-FDAC5EACAE2E@identry.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Oct 10, 2008 at 12:45:04PM -0400, John Almberg wrote:
> I just set up a new server with a very restricted PF configuration. One
> problem: I can no longer install software with ports (i.e, the /
> usr/ports collection.) I have to disable PF to do so. Obviously not a
> great solution.
>
> Am I correct in guessing that ports uses FTP to grab source files from
> mirrors? I'm trying to figure out the smallest number of ports (the
> TCP/IP kind) that I need to open in my firewall. I don't want to enable
> incoming FTP requests, but do want to allow outgoing ftp requests, I
> believe.
>
> Am I on the right track, here?
See the fetch(1) man page. Try this first:
sh/bash: export FTP_PASSIVE_MODE=true
csh: setenv FTP_PASSIVE_MODE true
Chances are this will address the problem for you.
--
| Jeremy Chadwick jdc at parodius.com |
| Parodius Networking http://www.parodius.com/ |
| UNIX Systems Administrator Mountain View, CA, USA |
| Making life hard for others since 1977. PGP: 4BD6C0CB |
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081010165116.GA37287>