ftp access

["al vanyushenkov"]

HI all!

I use FreeBSD 4.8 with ipfw2

I have ipfw rules

...
check-state
...
allow udp from me to any 21 keep-state out via rl0
allow tcp from me to any 21 setup keep-state out via rl0
deny all from any to any

rl0 is my internet interface.

When i tried to use ftp i connected, ls successfully,
but when i tried to get or put files i got records in ipfw.log
deny tcp x.x.x.x:20 y.y.y.y:z

where x.x.x.x is remote ip address
y.y.y.y is my ip address

Does anybody know what rules should i add to allow tcp connections from me
and deny all connections from outside to me.

Thanks
vanyushenkov alexey
adm at ruskhleb.ru