" Date: Sat, 06 Aug 2011 01:17:15 +0100
" From: Darren Reed <[email protected]>
" 
" On 5/08/2011 7:29 PM, Sandwich Maker wrote:
" > solaris 8, ipf 3.4.35.
" >
" > is it possible to construct a rule which allows incoming port 20
" > [ftp-data] -only- when an outgoing port 21 [ftp] connection is active?
" > anyone have an example?
" 
" You have to use the NAT proxy.
" 
" .e.g.
" 
" map bge0 0/0 -> 0/32 proxy port ftp ftp/tcp

big surprise - worked like a champ.

thanks darren!
________________________________________________________________________
Andrew Hay                                  the genius nature
internet rambler                            is to see what all have seen
[email protected]                       and think what none thought

Reply via email to