[ale] IPFW firewall rules permitting ftp transfers ?

[Gary Maltzen]

It sounds like you aren't letting the "active" ftp-data (tcp/20) sessions
back through the firewall.

Unless you specify a "passive" connection, when you attempt to download a
file the remote server will attempt to contact your system on port 20
(actually incoming port-1) to establish a data session.

>I have my firewall going but I am unable to construct a satisfactory
>rule pair to permit ftp usage.
>
>Goal: to be able to initiate ftp from any machine ON THE LAN and receive
>file transfers as well
>
>I can ping to remote ftp sites OK from lan members but when I try to
>initiate an ftp session, there is login, but transfers are blocked. 
>
>If I throw open the firewall there's no problem, of course. 
>
>Also, the Firewall box can transact ftp sessions OK.
>
>Please assume the lan consists of a Class C network of, no more than, 16
>machines on 123.45.67.100 - 123.45.67.115.
>
>Anyone got a rule(s) that allow this, using IPFW ?

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.