Noah <[EMAIL PROTECTED]> writes:

> what is a good rule to allow passive FTP to work.
>
> the following rules still blocks passive FTP.
>
>        #/** Allow setup of FTP PASSIVE **/
>        ${fwcmd} add allow tcp from any to ${ip} 49152-65534 setup

If the passive FTP client is on ${ip}, then that's the wrong
direction; it needs to be able to *send* the SYN.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
                http://be-well.ilk.org/~lowell/
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to