ipfw: fetch doesn't reach ftp://fttp.sites.foo

O. Hartmann ohartman at zedat.fu-berlin.de
Fri Mar 7 18:57:32 UTC 2014


Recently I swaitched from pf to ipfw on some CURRENT boxes and for convenience I used the
"workstation" predefinition of FreeBSD. But with that change, all access of ports via
fetch located at ftp-sites stopped passing the filter.

Even switching to "open" doesn't help and this is confusing me.

The CURRENT box in question is passing its traffic within a LAN through a gateway running
also FreeBSD CURRENT, but with pf. The gateway is performing NAT. As long as the failing
client behind the gateway system is using pf as the filter, the traffic for ftp seems to
pass through. On the gateway with pf as the default filter, the ports fetching via
ftp-site their sources perform without problems.

What is up with IPFW?

Is their a solution? I tried to search google for "freebsd ipfw ftp" but I didn't find
anything suitable targeting my problem or any problem of that kind.


Thanks in adavance,

Oliver 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20140307/b3b95edc/attachment.sig>


More information about the freebsd-current mailing list