From owner-FreeBSD-net-jp@jp.freebsd.org  Thu Nov 16 22:06:06 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id WAA24890;
	Thu, 16 Nov 2000 22:06:06 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from server.genius.gr.jp (server.genius.gr.jp [210.226.69.178])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id WAA24884
	for <FreeBSD-net-jp@jp.freebsd.org>; Thu, 16 Nov 2000 22:06:05 +0900 (JST)
	(envelope-from tsu@genius.gr.jp)
Received: (qmail 518 invoked from network); 16 Nov 2000 22:05:34 +0900
Received: from luke.genius.local (HELO luke) (192.168.1.10)
  by server.genius.gr.jp with SMTP; 16 Nov 2000 22:05:34 +0900
Date: Thu, 16 Nov 2000 22:05:34 +0900
From: SATO tsuyoshi <tsu@genius.gr.jp>
To: FreeBSD-net-jp@jp.freebsd.org
In-Reply-To: <20001116.213626.74740468.sato@naoko.org>
References: <20001116.213626.74740468.sato@naoko.org>
Message-Id: <3A13DB9E320.8BB8TSU@mail.genius.gr.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver 1.26.05
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-net-jp 2851
Subject: [FreeBSD-net-jp 2851] Re: ftp & ipfilter
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: tsu@genius.gr.jp


> anonymous ftp server$B$K$7$F$$$?(BFreeBSD 4.1.1$B$K(BIP filter$B$rF3F~$7$?$$(B($B$H(B
> $B$$$&$+4{$KF3F~$7$F$7$^$C$?(B^^;)$B$N$G$9$,!"(Bftp$B$N(Bpassive mode$B$G%"%/%;%9$r(B
> $B5v2D$9$k$K$O$I$&$7$?$i$$$$$N$+NI$/$o$+$j$^$;$s!#(Bwu-ftpd$B$r;HMQ$7$F$$$^(B
> $B$9!#(Brc.firewall$B$K$O2<5-$N$h$&$K=q$$$F$$$^$9!#(B

$B5v2D$9$k$@$1$J$i(B
$B#1!%%j%b!<%H$+$i%5!<%P$X$N%3%^%s%I%A%c%s%M%k(B(21)$B$X$N(Btcp$B@\B3$H$=$N5"$j(B
 ipfw add allow tcp from any to server 21
 ipfw add allow tcp from server 21 to any established

$B#2!%%j%b!<%H$+$i%5!<%P$X$N%]!<%H(B1024$B0J>e$X$N(Btcp$B@\B3$H$=$N5"$j(B
 ipfw add allow tcp from any to server 1024-65535
 ipfw add allow tcp from server 1024-65535 to any established

$B$G%Q%C%7%V%b!<%I$O(BOK$B$@$H;W$$$^$9$,!"#2$N%k!<%k$C$F!V%U%#%k%?!W$N0UL#$r@.(B
$B$7$F$$$J$$46$8$K$J$C$A$c$$$^$9$M!#(B

($B%o!<%k%I$KBP$7$F(B)$BF?L>(BFTP$B%5!<%P$r8x3+$9$k$J$i$A$g$C$H4m81$J46$8$O$7$^$9!#(B

---
$B:4F#(B $B9d(B -SATO tsuyoshi-
tsu@genius.gr.jp


