Hello Emil Am Sun, Nov 07, 2004 at 03:27:02PM +0100 Emil Khatib schrieb: > ipfw add allow tcp from any to any 1024-65000 keep-state > is it secure to open those ports?
... if no service is running there I see no problems. > On Sun, 7 Nov 2004 15:22:16 +0100, Martin Schweizer > <[EMAIL PROTECTED]> wrote: > > Hello > > > > I had a long time to figure out the rules for ipfw (with and without nat, no > > different for me). Attached I send you the part of rc.firewall that is for > > ftp: > > > > ipfw -f flush > > ipfw add check-state > > > > [snip] > > > > # FTP > > ipfw add allow tcp from any to any 20 > > ipfw add allow tcp from any to any 21 > > ipfw add allow tcp from any to any 1024-65000 keep-state > > > > [snip ] > > > > Am Sun, Nov 07, 2004 at 09:02:10AM -0500 Ara schrieb: > > > This mail is probably spam. The original message has been attached > > > along with this report, so you can recognize or block similar unwanted > > > mail in future. See http://spamassassin.org/tag/ for more details. > > > > > > Content preview: Hello Are you connecting directly to internet or via > > > nat? In that case you may have to enable passive mode on your ftp > > > client > > > > > > Content analysis details: (3.60 points, 3 required) > > > IN_REP_TO (-0.5 points) Has a In-Reply-To header > > > FORGED_MUA_OUTLOOK (3.5 points) Forged mail pretending to be from MS > > > Outlook > > > MISSING_OUTLOOK_NAME (0.6 points) Message looks like Outlook, but isn't > > > > > > > > > > Content-Description: original message before SpamAssassin > > > From: "Ara" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Date: Sun, 7 Nov 2004 09:02:10 -0500 > > > X-Mailer: Microsoft Office Outlook, Build 11.0.6353 > > > Subject: RE: FTP access with ipfw > > > > > > > > > > > > > Hello > > > Are you connecting directly to internet or via nat? In that case you may > > > have to enable passive mode on your ftp client > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Emil Khatib > > > Sent: November 7, 2004 8:54 AM > > > To: [EMAIL PROTECTED] > > > Subject: FTP access with ipfw > > > > > > Hi, I-m trying to secure my FreeBSD box using ipfw, but i can-t > > > configure FTP client to access the internet. I-ve googled aroun > > > everywhere but none of the solutions worked for me! I-m connected > > > using dialup and user ppp. > > > And another question, Would it be better if I used the firewall > > > included with PPP? -- Regards Martin Schweizer <[EMAIL PROTECTED]> PC-Service M. Schweizer GmbH; Gewerbehaus Schwarz; CH-8608 Bubikon Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch; public key : http://www.pc-service.ch/pgp/public_key.asc; fingerprint: EC21 CA4D 5C78 BC2D 73B7 10F9 C1AE 1691 D30F D239;
pgpEi4qyNQrLx.pgp
Description: PGP signature
