Re: dynamic ftp rule
Darren Reed <[email protected]> Sat, 06 Aug 2011 01:17:15 +0100
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <22811_1312585934_4E3C78CD_22811_15688_1_4E3C880B.4000204@reed.wattle.id.au> |
On 5/08/2011 7:29 PM, Sandwich Maker wrote: > solaris 8, ipf 3.4.35. > > is it possible to construct a rule which allows incoming port 20 > [ftp-data] -only- when an outgoing port 21 [ftp] connection is active? > anyone have an example? You have to use the NAT proxy. .e.g. map bge0 0/0 -> 0/32 proxy port ftp ftp/tcp Darren