[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

ipfwadm testing



Hi

i am trying to open up the firewall to allow ftp for a particular server...
if not all servers/pc's.

currently i am typing in the ipfwadm commands on the command line but i am
unsure whether it becomes active straight away... should i put the test
rules in the ipfw file that is loaded via booting or will typing them in
via command line work straightaway?

Below is what i am trying out but it is not working.  We use masquerading
and the ip address i am putting as variable $MYSERVER is the real ip
address.  Perhaps i need to use the command $IPFWMSQ  instead of $IPFWACC.

Is there a way to log what is happening... it is hard to know what the hell
is going on when you type in anther rule and it does nothing :)

IPFWACC="/sbin/ipfwadm -F -b -a accept"
IPFWMSQ="/sbin/ipfwadm -F -b -a masquerade"
ANYHOST="0.0.0.0/0"
ANYPORT="0:65535"
USERPORT="1024:65535"

$IPFWACC -P tcp     -S $MYSERVER ftp ftp-data           -D $ANYHOST
$ANYPORT
$IPFWACC -P tcp     -S $MYSERVER $USERPORT    -D $ANYHOST ftp ftp-data

Thanx

Zane



Reply to: