configuring fetch to passive mode

[Erik Norgaard]

Nikos Vassiliadis wrote:
> On Friday 17 March 2006 12:41, Erik Norgaard wrote:
>> Hi:
>>
>> This ought to be a configuration tunable, but I can't find any
>> documentaion on it: How to I force fetch to use passive mode?
>>
>> When I try "make fetch" of some port I get:
>>
>>    => Attempting to fetch from \
>>        ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
>>    fetch: \ ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/file: \
>>        Operation not permitted
>>
>> It fails quickly, no sign of things timing out.
>>
>> In my firewall (pf), I have
>>
>> block in  quick on $ext_if all
> 
> You block everything that comes in from your external interface.
> The "quick" keyword means that the search ends there. So you
> no incoming traffic passes...

Incomming connections yes, but I have keep state on outgoing, that's why 
passive ftp should work while active fail. Otherwise I would have 
problems with all kinds of traffic but I don't.

Thanks, Erik


-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9