Re: What ports need to be open on a firewall to allow cvsup?

2003-08-14 Thread Simon Barner
Hi,

> The company I work for is implementing a new firewall, and there is some
> posibilty I might be able to get the apropriate ports to cvsup my FreeBSD
> machines open.
> 
> Assuming pasive mode cvsup, what ports would I need open?

I think that the multiplexed mode is more appropriate for your needs
since the passive mode will need 2 TCP connections from your machine to
the CVSup-Server (one to the CVSup port 5999 and an abitrary other one).

If you use the multiplexed mode, however, CVSup will work with a single
TCP connection from your machine to the CVSup server's port 5999.

The cvsup(1) man page explains this in detail, but basically your
firewall must permit outgoing TCP traffic from your machine to
cvsup.server:5999 and incoming TCP traffic from cvsup.server:5999 to
your machine.

Regards,
 Simon


signature.asc
Description: Digital signature


RE: What ports need to be open on a firewall to allow cvsup?

2003-08-14 Thread Peut Kotze
Hi

For a stateful firewall:
check-state
allow tcp from my-server to outside-mirror cvsup setup keep-state

Non stateful firewall:
allow tcp from any to any established
allow tcp from my-server to outside-cvsmirrror cvsup setup

The port number for cvsup according to /etc/services is 5999(tcp)

Hope it helps
Peut


-Original Message-
From: stan [mailto:[EMAIL PROTECTED]
Sent: 07 August 2003 03:04
To: Free BSD Questions list
Subject: What ports need to be open on a firewall to allow cvsup?


The company I work for is implementing a new firewall, and there is some
posibilty I might be able to get the apropriate ports to cvsup my
FreeBSD
machines open.

Assuming pasive mode cvsup, what ports would I need open?

-- 
"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
-- Benjamin Franklin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


What ports need to be open on a firewall to allow cvsup?

2003-08-08 Thread stan
The company I work for is implementing a new firewall, and there is some
posibilty I might be able to get the apropriate ports to cvsup my FreeBSD
machines open.

Assuming pasive mode cvsup, what ports would I need open?

-- 
"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
-- Benjamin Franklin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: What ports need to be open on a firewall to allow cvsup?

2003-08-08 Thread Jason Stewart
stan wrote:

The company I work for is implementing a new firewall, and there is some
posibilty I might be able to get the apropriate ports to cvsup my FreeBSD
machines open.
Assuming pasive mode cvsup, what ports would I need open?

 

~$grep cvsup /etc/services
cvsup   5999/tcpCVSup   # CVSup file 
transfer/John Polstra/FreeBSD
cvsup   5999/udpCVSup   # CVSup file 
transfer/John Polstra/FreeBSD

You need these ports for outgoing. If you keep state on your 
connections, you don't have to use passive cvsup, but if you need it or 
want it for some reason, you'll have to pick a port range for incoming 
passive connections and specify those ports with -P in the cvsup args. 
See cvsup (1) for more details.

Good Luck,
Jason
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"