Hi,
I have a server running xstreamos with added proftpd old package.
It works fine in LAN, while I'm fighting again with ipfilter to allow for ftp 
from the WAN.
The system has its public interface with ipfilter allowing other ports, such as 
80, no problem.
For FTP to get in I have:
pass in quick proto tcp from any to [pub-ip]/32 port = 21 flags S keep state
pass in quick proto tcp from any to [pub-ip]/32 port = ftp-data flags S keep 
state
pass in quick proto tcp from any port = ftp-data to [pub-ip]/32 port1023 flags 
S keep state
but once the client tries to list directories, I get these blocks from ipfilter:
10/04/2017 17:51:39.906265 igb1 @0:69 b [incoming-pub-ip],10129 -[pub-ip],63286 
PR tcp len 20 52 -S IN
10/04/2017 17:51:42.914007 igb1 @0:69 b [incoming-pub-ip],10129 -[pub-ip],63286 
PR tcp len 20 52 -S IN
10/04/2017 17:51:48.917761 igb1 @0:69 b [incoming-pub-ip],10129 -[pub-ip],63286 
PR tcp len 20 48 -S IN
10/04/2017 17:52:00.092737 igb1 @0:69 b [incoming-pub-ip],60153 -[pub-ip],51706 
PR tcp len 20 52 -S IN
10/04/2017 17:52:03.105643 igb1 @0:69 b [incoming-pub-ip],60153 -[pub-ip],51706 
PR tcp len 20 52 -S IN
10/04/2017 17:52:09.110970 igb1 @0:69 b [incoming-pub-ip],60153 -[pub-ip],51706 
PR tcp len 20 48 -S IN
10/04/2017 17:54:54.343544 igb1 @0:68 b [incoming-pub-ip],11407 -[pub-ip],35855 
PR tcp len 20 52 -S IN
10/04/2017 17:54:57.356858 igb1 @0:68 b [incoming-pub-ip],11407 -[pub-ip],35855 
PR tcp len 20 52 -S IN
10/04/2017 17:55:03.375856 igb1 @0:68 b [incoming-pub-ip],11407 -[pub-ip],35855 
PR tcp len 20 48 -S IN
10/04/2017 17:55:14.622165 igb1 @0:68 b [incoming-pub-ip],2821 -[pub-ip],59784 
PR tcp len 20 52 -S IN
10/04/2017 17:55:17.642829 igb1 @0:68 b [incoming-pub-ip],2821 -[pub-ip],59784 
PR tcp len 20 52 -S IN
10/04/2017 17:55:23.646537 igb1 @0:68 b [incoming-pub-ip],2821 -[pub-ip],59784 
PR tcp len 20 48 -S IN
What's wrong with my conf?
Gabriele
----------------------------------------------------------------------------------------
Sonicle S.r.l.
:
http://www.sonicle.com
Music:
http://www.gabrielebulfon.com
Quantum Mechanics :
http://www.cdbaby.com/cd/gabrielebulfon



-------------------------------------------
illumos-discuss
Archives: https://www.listbox.com/member/archive/182180/=now
RSS Feed: https://www.listbox.com/member/archive/rss/182180/21175430-2e6923be
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=21175430&id_secret=21175430-6a77cda4
Powered by Listbox: http://www.listbox.com

Reply via email to