Date: Fri, 07 Mar 2014 15:33:39 -0500 From: Allan Jude <freebsd@allanjude.com> To: freebsd-current@freebsd.org Subject: Re: ipfw: fetch doesn't reach ftp://fttp.sites.foo Message-ID: <531A2D23.30907@allanjude.com> In-Reply-To: <20140307195719.654653c9.ohartman@zedat.fu-berlin.de> References: <20140307195719.654653c9.ohartman@zedat.fu-berlin.de>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --U8uILPx6O0Ga7n167wLXOobmlWFCWtrvj Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 2014-03-07 13:57, O. Hartmann wrote: >=20 > Recently I swaitched from pf to ipfw on some CURRENT boxes and for conv= enience I used the > "workstation" predefinition of FreeBSD. But with that change, all acces= s of ports via > fetch located at ftp-sites stopped passing the filter. >=20 > Even switching to "open" doesn't help and this is confusing me. >=20 > The CURRENT box in question is passing its traffic within a LAN through= a gateway running > also FreeBSD CURRENT, but with pf. The gateway is performing NAT. As lo= ng as the failing > client behind the gateway system is using pf as the filter, the traffic= for ftp seems to > pass through. On the gateway with pf as the default filter, the ports f= etching via > ftp-site their sources perform without problems. >=20 > What is up with IPFW? >=20 > Is their a solution? I tried to search google for "freebsd ipfw ftp" bu= t I didn't find > anything suitable targeting my problem or any problem of that kind. >=20 >=20 > Thanks in adavance, >=20 > Oliver=20 >=20 What error does fetch give? Is it having problems with DNS, connection to the FTP site, or just making the FTP DATA connection? Have you tried with 'passive' mode on/off? --=20 Allan Jude --U8uILPx6O0Ga7n167wLXOobmlWFCWtrvj Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJTGi0jAAoJEJrBFpNRJZKfXAgP/2oHjeTnQXub6j8mirvtulAO BYPjbA08NPS178VWKUkDTIKU9lFP+czXsqStbbpTjXCax0L0xr2l5IsNokakIJgN e3ubgxyLZ8UgzE0PkBzcmbvueT+OS0c+NFHGFIIe5wQar3bk1JBBrJI5+t9GEXPP fovv6PfTTl3pqfanKneKjOmkR3MOw/g5IjUv0jLk/0xkHcr+EK7PLUJlSbtJaD7r EOePxc5fAr4sKtKumNbyKnrkuPUebeEZvhZLYjmoKmBWjews/j9RccRAtz6W1gAV NpDhmuxywpkgleGTVSSPkBufLvh7hhOfkWN50pCG/9LJUzCd+8ixDI37S2C3j8FA HIGTsQp0X7Y+Unzju1lCbXybkrKc+iF3LrYj/hPGge/2xcdV0CFW0QU76b/O6tUw cNCE8OvicDY/FEQrqH1knk8fOYWkaR2ADG1tqkZ6jtizSmPh99F2/NwMGqVfFG9J ubV02he1GLCeqVxlgYyPZ9TJMhnlASZp/RHi+4CLOgAFPt1l2htZbLLM/o2sfxsq k0rO0mbC3YdO3AsOX9gOe71st+2it3qy4iCFyeAg8r55pQ19pVxvJQeqRei2DKFx HF8+5FLgcvBh+gcALDK7pV72Bf6g0v7PV2EaRDUPNbqxPYZnNj+PoJNAAu7SBDxk EsSTlFHLtu0fu5YDCRbi =dO/j -----END PGP SIGNATURE----- --U8uILPx6O0Ga7n167wLXOobmlWFCWtrvj--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?531A2D23.30907>