Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Sep 2000 00:42:42 -0400
From:      Allen Landsidel <all@biosys.net>
To:        freebsd-stable@FreeBSD.ORG
Subject:   Re: ipfw changes in latest stable 
Message-ID:  <4.3.2.7.2.20000913004042.00b1ce88@mail.megapathdsl.net>
In-Reply-To: <XFMail.000912221302.wolpert@methodsystems.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 22:13 09/12/2000 -0600, Edward Wolpert wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>Folks-
>
>   Over the weekend, I updated to the latest 4.1-stable from an update
>about a few weeks ago. I've got the simple firewall setup (basically,
>the client mode in the rc.firewall file) on my box.  However, I can't
>do a fetch (via 'make install') on items in the ports directory anymore.
>I can't ftp anymore. When I try, I can contact the site, but when I
>try to download files, it doesn't work.  When I open up the tcp ports
>via ipfw, it then lets me. Any recent changes to ipfw lately that could
>explain this? (It used to work)  Thanks.

You need to use ftp in passive mode unless you have rules that allow the 
ftp-data information to come in.  I believe there is an example config for 
this in the ipfw documentation.  I'm not sure if client does this by 
default, since I always use the "closed" model and add allow lines myself.




>
>Virtually,                                 | Open/Web Systems Architect
>Edward Wolpert <wolpert@methodsystems.com> |
>              http://www.methodsystems.com  | 4eb8                  4e75
>___________________________________________/
>
>-----BEGIN PGP SIGNATURE-----
>Version: 2.6.2
>
>iQB1AwUBOb7+zq2tQW/xJRRFAQG8RQMAjhali1oqCDzvBXxV8wvO95vyMOb8hv+3
>Tb3tjllH+dESRSdxHlcnBLgZ3pRGlIRnTWKDDChPy/eUbbByjGJ30NHrjSoVohlZ
>U8+xrW0a/Hr6DcT/HKcxabNQi6vHeA45
>=+cC3
>-----END PGP SIGNATURE-----
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-stable" in the body of the message

-------signature file-------
PGP Key Fingerprint:
446B 7718 B219 9F1E 43DD  8E4A 6BE9 D739 CCC5 7FD7

Available from ldap://certserver.pgp.com

"I don't think [Linux] will be very successful in the long run."
"My experience and some of my friends' experience is that Linux is quite 
unreliable. Microsoft is really unreliable but Linux is worse."

-Ken Thompson, Interview May 1999.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20000913004042.00b1ce88>