Re: IPF and FTP Server

Steve Clark <[email protected]> Wed, 12 Aug 2009 14:20:52 -0400
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <9901_1250101275_4A83081A_9901_1072_1_4A830804.5040808@netwolves.com>
[email protected] wrote:
>> Hello! I'm trouble to get working my Filezilla FTP Server.
>>
>> Scen�rio:
>>
>> FileZilla Ftp server running on a XP Machine (Yes, need to be windows)
>>
>> Firewall: FreeBSD 6.2-RELEASE-p9
>>
>> [henrique@guardian /]# ipf -V
>>
>> ipf: IP Filter: v4.1.13 (416)
>>
>> Kernel: IP Filter: v4.1.13
>>
>> Running: yes
>>
>> Log Flags: 0 = none set
>>
>> Default: block all, Logging: available
>>
>> Active list: 0
>>
>> Feature mask: 0x10a
>>
>> I'm trying to implement this rule:
>>
>> map xl0 128.1.1.9/32 -> 200.198.106.170/32 proxy port ftp ftp/tcp
map xl0 from 128.1.1.9/32 to any port=21 -> 200.198.106.170/32 proxy port 21 ftp/tcp
works just fine for me.


>>
>> But I got this:
>>
>> invalid port number error at "tcp", line 5
>>
>> help!!
> 
> 
> Hi Luis,
> 
> Any luck yet?
> 
> If I understand your desire, you want ftp connection requests from
> the internet into the firewall to redirect to an XP machine inside
> the firewall.
> 
> I think you want to use the rdr command rather than map for that.
> 
> What is your outward facing interface? I assume xl0 is inward facing.
> 
> Give me that and I'll take a stab at a rule for you to try.
> 
> --gene
> 
>