Subject: Re: Allowing FTP via a ipfilter firewall
To: Martin Husemann <martin@duskware.de>
From: Phil Pereira <freeserver@wintellect.co.uk>
List: netbsd-users
Date: 05/11/2003 12:41:59
Martin,
Thanks for the suggestion; however, passive mode didn't provide any help.
So far I have determined that the commands I can use are "cd" and "pwd", anything else, such as "get" or "ls" seem to hang.
Any more ideas?
Phil.
On Sat, 10 May 2003 20:07:36 +0200
Martin Husemann <martin@duskware.de> wrote:
> On Sat, May 10, 2003 at 06:40:59PM +0100, Phil Pereira wrote:
>
> > Am trying out ipfilter on my NetBSD box via my LAN. It seems
> > to be running fine, however, when connecting via ftp, I can
> > log in, but it refuses to let me get a file or "ls" - it just
> > hangs. If I FTP into the box from itself, all works fine
>
> This sound like you are not using passive ftp. For NetBSDs ftp client this
> is the default, but most others default to active connections. Most modern
> clients support the "passive" command though (or have a checkbox to that
> effect).
>
> For NAT the ipf ftp proxy fixes the problem - I have no idea (and refuse to
> think deeper about it) if this works for filtering too.
>
> Martin
--
Phil.
---------------------------------------------------
(_ )
UNIX is "user-friendly", \\\", ) ^
it's just picky about its friends! \/, \(
cXc_/_)
---------------------------------------------------