configuring fetch to passive mode

[Erik Norgaard]

RW wrote:
> On Friday 17 March 2006 10:41, Erik Norgaard wrote:
>> Hi:
>>
>> This ought to be a configuration tunable, but I can't find any
>> documentaion on it: How to I force fetch to use passive mode?
>>
>> When I try "make fetch" of some port I get:
>>
>>    => Attempting to fetch from \
>>        ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
>>    fetch: \ ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/file: \
>>        Operation not permitted
> 
> I suspect this is a permission problem, not ftp.
> 
> You can set passive mode with:
> 
>   FETCH_CMD=          /usr/bin/fetch -ARrp
> 
> in make.conf. 

This is a very bizare problem:

1) I boot, and rules are loaded correctly, to see what's there I do

    # pfctl -sr > /tmp/boot.rules

2) I try make fetch some port, and get the error mentioned above

3) I then reload the very same rules,

    # pfctl -Fr && pfctl -Rf /etc/pf.conf

    and to be sure, I do

    # pfctl -sr > /tmp/reload.rules

    a diff shows no difference.

4) I try make fetch same port as previously, and now it works.

I can reboot and repeat the above. Btw, all is done as root, so 
permissions should be ok.

This is a fresh install, I did last week:

FreeBSD 6.1-PRERELEASE #0: Wed Mar  8 15:03:03 CET 2006 
norgaard at localhost:/usr/obj/usr/src/sys/GENERIC  i386

Any hints on this will be highly appreciated. There is one thing that I 
have left out, I go through a proxy, yet, I can't see how this should 
make any difference.

Cheers, Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9