> I've got an ipfilter firewall on a fbsd 5.1 box protecting an internal > network. I'm able to connect to internal machines via ftp through the > firewall, that is to say i can log in to them, but any atempt to do > anything, such as download a file or do an ls command gives me: > error 425: unable to build data connection > I'm still logged in, if i type quit the server disconnects. I've also > tried the -a option to ftp. This problem does not occur with boxes on the > internal network, which leads me to believe it's something with the > firewall. Any ideas on this?
It should work with passive FTP. To make active FTP work, you'll need to write ipfilter rules to allow connections the range of ports your FTP server uses for the data channel, and possibly configure that server to use a specific port range. See the man page for you FTP server. David S.
