[FUGSPBR] Servidor FTP passando por ipfilter

[Mauricio Bonani]

Olá pessoal, estou com um pequeno problema e recorro a ajuda de vocês.

Uso as regras abaixo, porém ninguém consegue conectar ao meu servidor FTP.
Preciso abrir mais alguma porta?

Modem (200.xxx.xxx.xxx e 10.0.0.138) e servidor (10.0.0.139 e 192.168.0.7)

O modem repassa todas as conexões entrantes para o servidor.

# ipfstat -io
pass out quick on lo0 from any to any
skip 2 out from 10.0.0.139/32 to any
skip 1 out from 192.168.0.7/32 to any
skip 10 out from any to any
pass out quick proto icmp from any to 10.0.0.139/32 icmp-type echorep code 0 
keep state
pass out quick proto icmp from any to 10.0.0.139/32 icmp-type echo code 0 
keep state
pass out quick proto icmp from any to 192.168.0.7/32 icmp-type echorep code 
0 keep state
pass out quick proto icmp from any to 192.168.0.7/32 icmp-type echo code 0 
keep state
pass out quick proto icmp from 10.0.0.139/32 to 192.168.0.0/16 icmp-type 
echorep code 0 keep state
pass out quick proto icmp from 10.0.0.139/32 to 192.168.0.0/16 icmp-type 
echo code 0 keep state
pass out quick proto icmp from 192.168.0.7/32 to 192.168.0.0/16 icmp-type 
echorep code 0 keep state
pass out quick proto icmp from 192.168.0.7/32 to 192.168.0.0/16 icmp-type 
echo code 0 keep state
pass out quick proto icmp from 192.168.0.0/16 to 192.168.0.0/16 icmp-type 
echorep code 0 keep state
pass out quick proto icmp from 192.168.0.0/16 to 192.168.0.0/16 icmp-type 
echo code 0 keep state
pass out quick proto icmp from 10.0.0.139/32 to any keep state
pass out quick proto icmp from 192.168.0.7/32 to any keep state
pass out quick proto tcp from 10.0.0.139/32 to any keep state
pass out quick proto tcp from 192.168.0.7/32 to any keep state
pass out quick proto udp from 10.0.0.139/32 to any keep state
pass out quick proto udp from 192.168.0.7/32 to any keep state
pass out quick from 10.0.0.139/32 to any
pass out quick from 192.168.0.7/32 to any
pass out quick proto icmp from 192.168.0.0/16 to any keep state
pass out quick proto tcp from 192.168.0.0/16 to any keep state
pass out quick proto udp from 192.168.0.0/16 to any keep state
pass out quick from 192.168.0.0/16 to any
pass out quick proto tcp from any to 192.168.0.2/32 port = 3389 keep state
pass out quick proto gre from any to 192.168.0.2/32
block out log quick from any to any
block out quick from any to any
pass in quick on lo0 from any to any
skip 2 in from 10.0.0.139/32 to any
skip 1 in from 192.168.0.7/32 to any
skip 10 in from any to any
pass in quick proto icmp from any to 10.0.0.139/32 icmp-type echorep code 0 
keep state
pass in quick proto icmp from any to 10.0.0.139/32 icmp-type echo code 0 
keep state
pass in quick proto icmp from any to 192.168.0.7/32 icmp-type echorep code 0 
keep state
pass in quick proto icmp from any to 192.168.0.7/32 icmp-type echo code 0 
keep state
pass in quick proto icmp from 192.168.0.0/16 to 10.0.0.139/32 icmp-type 
echorep code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to 10.0.0.139/32 icmp-type echo 
code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to 192.168.0.7/32 icmp-type 
echorep code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to 192.168.0.7/32 icmp-type 
echo code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to 192.168.0.0/16 icmp-type 
echorep code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to 192.168.0.0/16 icmp-type 
echo code 0 keep state
pass in quick proto icmp from 192.168.0.0/16 to any keep state
pass in quick proto tcp from 192.168.0.0/16 to any keep state
pass in quick proto udp from 192.168.0.0/16 to any keep state
pass in quick from 192.168.0.0/16 to any
skip 2 in from any to 10.0.0.139/32
skip 1 in from any to 192.168.0.7/32
skip 13 in from any to any
pass in quick proto tcp from any to any port = 22 keep state
pass in quick proto tcp from any to any port = 53 keep state
pass in quick proto tcp from any to any port = 5901 keep state
pass in quick proto tcp from any to any port = 25 keep state
pass in quick proto tcp from any to any port = 110 keep state
pass in quick proto tcp from any to any port = 3306 keep state
pass in quick proto tcp from any to any port = 10024 keep state
pass in quick proto tcp from any to any port = 10025 keep state
pass in quick proto tcp from any to any port = 80 keep state
pass in quick proto tcp from any to any port = 443 keep state
pass in quick proto tcp from any to any port = 21 keep state
pass in quick proto udp from any to 10.0.0.139/32 port = 53 keep state
pass in quick proto udp from any to 192.168.0.7/32 port = 53 keep state
pass in quick proto tcp from any to 192.168.0.2/32 port = 3389 keep state
pass in quick proto gre from any to 192.168.0.2/32
block in log quick from any to any
block in quick from any to any 

_______________________________________________________________
Para enviar um novo email para a lista: fugspbr em fugspbr.org
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/