ftp problem -ipfw with natd

Chuck Swiger cswiger at mac.com
Thu Oct 13 08:32:40 PDT 2005

Efren Bravo wrote:
> Hi,
> I've problem with ipfw with natd to access from internal network to
> internet ftp sites. From fbsd box i can access to ftp sites.
> vr0 = out interface
> = mi pc (winXP)
> 8668 = natd <== Why on this rule ntad is tranlated to 8668?
> My rules:
> ---------
> ...
> 00070 divert 8668 ip from any to any in via vr0

8668 is a local port which is commonly used for IPFW to redirect or divert 
traffic to natd, which is listening there.  You can change IPFW and natd to use 
another port number, which can even be useful if you want to run two copies of 

Anyway, to get FTP to work right through natd, you either need to use PASV 
(passive-mode FTP), or you need to put a punch_fw rule in your natd config 
file, like so:

punch_fw 10000:1000

...where 10000 is the starting rule number, and may need to be adjusted 
depending on your IPFW ruleset.


More information about the freebsd-questions mailing list