Date: Sat, 04 Feb 2006 14:57:57 +0100 From: Kristian Vaaf <vaaf@broadpark.no> To: questions@freebsd.org Subject: ftpd: Passive mode isn't working Message-ID: <fe7898d567d7.43e4c0f5@broadpark.no>
next in thread | raw e-mail | index | archive | help
Hello!
Somehow my passive mode isn't working.
# cat /etc/inetd.conf
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l
ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy
auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf
auth stream tcp6 nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf
ircd stream tcp nowait nobody /usr/local/sbin/bitlbee bitlbee
# cat /etc/pf.conf
int_if="ep0"
ext_if="rl0"
set block-policy drop
scrub in all
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any \
port 21 -> 127.0.0.1 port 8021
rdr on $ext_if proto tcp from any to any \
port 50000 -> 192.168.187.2 port 50000
block drop log all
pass quick on { lo0 $int_if }
pass out on $ext_if inet proto { tcp, udp, icmp } \
from any to any keep state
pass in on $ext_if proto icmp \
from any to any
pass in on $ext_if inet proto { tcp, udp } \
from any to ($ext_if) port 53
pass out on $ext_if inet proto { tcp, udp } \
from any port 53 to any
pass out on $ext_if inet proto udp \
from any to any port 123 keep state
pass in on $ext_if inet proto tcp \
from any to ($ext_if) port { 21, 22, 25, 80, 110, 113, 143 } \
flags S/SA keep state
pass in on $ext_if inet proto tcp \
from any port 20 to ($ext_if) user proxy flags S/SA keep state
pass in on $ext_if proto tcp \
from any to any port 31337 keep state
pass in on $ext_if proto tcp \
from any to any port 50000 keep state
pass in on $ext_if proto tcp \
from any to any port 53333:55555 keep state
I hope somebody can tell what's wrong.
All the peace,
Vaaf
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fe7898d567d7.43e4c0f5>