From owner-FreeBSD-net-jp@jp.freebsd.org  Thu Nov 16 21:36:58 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id VAA23288;
	Thu, 16 Nov 2000 21:36:58 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from ns.naoko.org (ns.naoko.org [210.154.63.34])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id VAA23283
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 16 Nov 2000 21:36:57 +0900 (JST)
	(envelope-from sato@matrixmarket.net)
Received: from localhost (localhost [127.0.0.1])
	by ns.naoko.org (8.11.1/3.7W-) with ESMTP id eAGCaQE12715
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 16 Nov 2000 21:36:26 +0900 (JST)
Date: Thu, 16 Nov 2000 21:36:26 +0900 (JST)
Message-Id: <20001116.213626.74740468.sato@naoko.org>
To: FreeBSD-net-jp@jp.freebsd.org
From: Tomoaki SATO <sato@matrixmarket.net>
X-Mailer: Mew version 1.95b43 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2847
Subject: [FreeBSD-net-jp 2847] ftp & ipfilter
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: sato@matrixmarket.net

$B:4F#$H?=$7$^$9!#(B

anonymous ftp server$B$K$7$F$$$?(BFreeBSD 4.1.1$B$K(BIP filter$B$rF3F~$7$?$$(B($B$H(B
$B$$$&$+4{$KF3F~$7$F$7$^$C$?(B^^;)$B$N$G$9$,!"(Bftp$B$N(Bpassive mode$B$G%"%/%;%9$r(B
$B5v2D$9$k$K$O$I$&$7$?$i$$$$$N$+NI$/$o$+$j$^$;$s!#(Bwu-ftpd$B$r;HMQ$7$F$$$^(B
$B$9!#(Brc.firewall$B$K$O2<5-$N$h$&$K=q$$$F$$$^$9!#(B

 # Allow pass to our ftp
 ${fwcmd} add pass tcp from any to any ftp\\-data-ftp
 ${fwcmd} add pass tcp from ${ftpgw} ftp\\-data-ftp to ${ip}


default$B$GA4$FJD$8$F!"I,MW$J$H$3$m$@$13+$1$F9T$/%9%?%$%k$G(BIP filter$B$r3](B
$B$1$F$$$^$9!#(Bpassive$B$@$H(Bport$B$,8GDj$K$J$i$J$$$N$G!"2<5-$N%m%0$N$h$&$K$7$C(B
$B$+$j$H(BDeny$B$5$l$F$7$^$$$^$9!#(B

Nov 16 15:21:18 bsd /kernel: ipfw: 3300 Deny TCP 133.XXX.XXX.7:1088 133.XXX.XXX.217:15159 in via xl0

$B$H$j$"$($:!"(B#define DISABLE_PASV 1$B$G(Bwu-ftpd$B$r(Bmake$B$7$J$*$7$F2<5-$NMM$K(B
$B$7$F$_$^$7$?!#$G$9$,!"$3$l$G$O!"2?$N2r7h$K$b$J$C$F$$$^$;$s!#(B($B>P(B)

ftp> ls
425 Cannot open passive connection
Passive mode refused.

$B2?$+L/0F$O$"$k$G$7$g$&$+!)(B

---
 // SATO Tomoaki
 // home:<sato@matrixmarket.net>

