Firewall and FreeBSD ports

[Jeremy Chadwick]

On Fri, Oct 10, 2008 at 12:45:04PM -0400, John Almberg wrote:
> I just set up a new server with a very restricted PF configuration. One 
> problem: I can no longer install software with ports (i.e, the / 
> usr/ports collection.) I have to disable PF to do so. Obviously not a  
> great solution.
>
> Am I correct in guessing that ports uses FTP to grab source files from 
> mirrors? I'm trying to figure out the smallest number of ports (the 
> TCP/IP kind) that I need to open in my firewall. I don't want to enable 
> incoming FTP requests, but do want to allow outgoing ftp requests, I 
> believe.
>
> Am I on the right track, here?

See the fetch(1) man page.  Try this first:

sh/bash: export FTP_PASSIVE_MODE=true
    csh: setenv FTP_PASSIVE_MODE true

Chances are this will address the problem for you.

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |