On 31/05/07, Mahabub Basha <[EMAIL PROTECTED]> wrote:
Hi all,
I am a newbie for freebsd. I am using freebsd 6.1. I have some problem to
access ftp server through external ip behind a pf firewall.
I can access my ftp server through active mode , but not working in passive
mode.
My ruleset file is in the following:
======================================================================
pf.conf
======================================================================
lan = "port2"
wan = "port1"
# User BiNAT Rules
binat on $wan from 10.0.0.10 to any -> 172.16.1.10
# User RDR Rules
rdr on $wan from any to 172.16.1.10 -> 10.0.0.10
# User Filter Rules
pass all
=========================================================================
my lan ip address is 10.0.0.10 and my wan ip is 172.16.1.10
I just put above three rules. And run my ftp server using inetd.
I used core-ftp client in windows xp to connect my ftp server machine , in
active mode its working fine.
But in passive mode its not working.
Before i asked this problem here, i read the following links and try out the
same. but its not working.
=====================================================================
http://www.openbsd.org/faq/pf/ftp.html
http://article.gmane.org/gmane.os.freebsd.devel.pf4freebsd/2952/match=issues+ftp+windows+pf
=====================================================================
I want to use binat rule.
can anyone help me to solve this issue.
- Mahabub Basha.S
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Hi,
First, try exclude:
rdr on $wan from any to 172.16.1.10 -> 10.0.0.10
because you are using binat, so try to use ftp on passive mode.
If it doens't work, tray to use ftp-proxy
(http://www.openbsd.org/faq/pf/ftp.html).
--
Gilberto Villani Brito
System Administrator
Londrina - PR
Brazil
gilbertovb(a)gmail.com
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"