proftpd/ipfw issues

Olivier Nicole on at cs.ait.ac.th
Fri May 30 01:49:44 PDT 2003


> allow tcp from any to x.x.x.x/24 20,21,22,25,53,80,443 setup

On ACTIVE FTP, the client initiate the connection to the port 21, but
the server initiate the connection from the port 20.

So you should open the port 20 with a rule like:

allow tcp from x.x.x.x/24 20 to any setup

Beside, if you have only one server on your network, why opening
incoming ftp to all the subnet?

Olivier


More information about the freebsd-questions mailing list