Re: RDR range port base

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <20601_1235302811_49A13998_20601_7422_1_49A13902.5020206@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
budsz wrote:
| Hi Folks,
|
| I've LAN with 192.168.0.0/24 segment IP Address, we've FTP server in
| the LAN using IPF as router (same box). The client game online using
| FTP for update patch to master FTP server. I make some script using
| fetch/wget under FreeBSD to mirroring all patch file to FTP local.
| Client game not running FTP passive mode so we make RDR like:
|
| rdr rl0 IP_REMOTE_FTP/32 port 21 -> IP_LOCAL_FTP port 21 tcp
|
| That's is work fine for me.
|
| But after patch 3 days ago, client game using PASV FTP,  that's hard
| for me to RDR base range IP Address destination. In other word, we can
| RDR on port 21 but nothing for passive FTP port ( > 1024 ). FYI, I
| can't do anything with client game because that already binary file.
|
| Any suggestions for this?

This sounds like a bug to me. I'll need to think about this more later...

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkmhOQIACgkQP7JIXtvLbFW49wCfXUxKYH78QCqMusCnXG6yvGsR
37cAn3AWXhZpavPTrmigO5hShxOLByyR
=dGnz
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.