From bounce-fwtk-users-303@listserv.nai.com Wed Apr 3 11:46 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA15797 Wed, 3 Apr 2002 11:46:23 -0500 (EST) X-Authentication-Warning: asm.Logicon.CA: mail set sender to using -f From: Vital Bellehumeur Reply-To: "fwtk-users" Organization: Logicon.CA To: "fwtk-users" Subject: [fwtk-users] Re: smap updates Date: Wed, 3 Apr 2002 11:57:52 -0500 X-Mailer: KMail [version 1.2] In-Reply-To: MIME-Version: 1.0 Message-Id: Content-Transfer-Encoding: 8bit List-Unsubscribe: Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1454 Status: RO I'm interested. Le 4 Janvier 2002 23:07, vous avez écrit : > Just in case anyone is interested, I updated my smap program again. > These updates dramatically improve the effectiveness of the > content filtering feature by now recognizing basic html tags (like >   and %quot;) and now allow filters to pass across multiple > input lines. I've also redid the algorithm and have significantly > reduced the IO and computational needs for the program. It now > runs nearly as fast as the unmodiffied smap programs. > > I've been running it stable for a week or so now - so I think the > code is pretty solid. We are scrapping off > 30,000 unwanted spam > messages - and that has a direct impact on the support levels for > mail adminstration. > > I've also integrated the first of Rick Murphy's patches into the > code. I will get more later. > > If anyone is interested, let me know and I will tell you where to > pick up the code. > > ted keller > > > > --- > You are currently subscribed to fwtk-users as: vbellehu@Logicon.CA > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com -- Vital G. Bellehumeur 200 9ieme rue, Rouyn-Noranda Quebec, Canada J9X 2C2 Tel.: 819-762-2288 x7730 Fax: 819-762-2289 email: vbellehu@Logicon.CA email: vital@sympatico.ca --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Apr 3 16:45 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id QAA17673 Wed, 3 Apr 2002 16:45:30 -0500 (EST) Message-ID: From: "Don" To: "fwtk-users" Subject: [fwtk-users] Re: Help! Scripting errror occurring ONLY behind the fwtk Date: Wed, 3 Apr 2002 16:58:21 -0500 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 941 Status: RO Hi, Is this referring to (in http-gw.c) the variable: static char http_buffer[8192]; ??? If so, how large can I increase the buffer by? Thanks, Don > I'm not where I can check on this quickly, but I'd suggest comparing > the length of that somewhat long line to the length of the input > buffer, and expanding the latter, if necessary. This might necessitate > still other changes. > > -- > Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao > OSIS Center Systems Support EMT-B > ----------------------------------------------------------------------- > This message is not an official statement of OSIS Center policies. > > --- > You are currently subscribed to fwtk-users as: don@lclcan.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 4 00:54 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id AAA20824 Thu, 4 Apr 2002 00:54:52 -0500 (EST) From: Lutz Kittler MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Message-ID: Date: Thu, 4 Apr 2002 08:06:06 +0200 (MEST) To: "fwtk-users" Subject: [fwtk-users] Re: smap updates In-Reply-To: X-Mailer: VM 6.75 under 21.1 (patch 7) "Biscayne" XEmacs Lucid List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1265 Status: RO I'm interested. > Just in case anyone is interested, I updated my smap program again. > These updates dramatically improve the effectiveness of the > content filtering feature by now recognizing basic html tags (like >   and %quot;) and now allow filters to pass across multiple > input lines. I've also redid the algorithm and have significantly > reduced the IO and computational needs for the program. It now > runs nearly as fast as the unmodiffied smap programs. > > I've been running it stable for a week or so now - so I think the > code is pretty solid. We are scrapping off > 30,000 unwanted spam > messages - and that has a direct impact on the support levels for > mail adminstration. > > I've also integrated the first of Rick Murphy's patches into the > code. I will get more later. > > If anyone is interested, let me know and I will tell you where to > pick up the code. > > ted keller > > > > --- > You are currently subscribed to fwtk-users as: vbellehu@Logicon.CA > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Apr 8 08:55 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id IAA03468 Mon, 8 Apr 2002 08:55:22 -0400 (EDT) Date: Sun, 7 Apr 2002 21:03:50 +0200 From: Jan Riedinger To: "fwtk-users" Subject: [fwtk-users] Can't download P 2.11 Message-ID: Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 549 Status: RO Hallo! I'm not able to download the patch for passive ftp (2.11). The file seems to be vanished. Does anyone have an idea, where I could get this patch? Thanx in advance. Off topic: I found in the mail archive something about plans for a new release. Are there any news about it? Regards Jan Riedinger PS: The instructions of the FAQ to subscribe to this mailing list are outdated. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Apr 8 09:01 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA03532 Mon, 8 Apr 2002 09:01:32 -0400 (EDT) Message-ID: Date: Mon, 08 Apr 2002 09:08:24 -0400 From: Keith Young Reply-To: "fwtk-users" Organization: V-ONE User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.4.1) Gecko/20020314 Netscape6/6.2.2 X-Accept-Language: en-us MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Re: Can't download P 2.11 Content-Transfer-Encoding: 7bit List-Unsubscribe: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Length: 787 Status: RO Jan Riedinger wrote: > I'm not able to download the patch for passive ftp (2.11). The file seems to > be vanished. Does anyone have an idea, where I could get this patch? > > Thanx in advance. > > Off topic: I found in the mail archive something about plans for a new > release. Are there any news about it? > Jan, I'll take care of it later this afternoon.... > PS: The instructions of the FAQ to subscribe to this mailing list > are outdated. I updated the site in the middle of last week to reflect the new mailing list changes. Were you looking at an outdated mirror? -- -- --Keith Young -kyoung@v-one.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Apr 8 12:31 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA04959 Mon, 8 Apr 2002 12:31:18 -0400 (EDT) Message-ID: From: "Jan Riedinger" To: "fwtk-users" Subject: [fwtk-users] Re: Can't download P 2.11 Date: Mon, 8 Apr 2002 18:03:20 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6700 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 X-Sender: 320078242462-0001@t-dialin.net List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 586 Status: RO > > PS: The instructions of the FAQ to subscribe to this mailing list > > are outdated. > > > I updated the site in the middle of last week to reflect the new mailing > list changes. Were you looking at an outdated mirror? > > -- > > -- > --Keith Young > -kyoung@v-one.com > I think I looked under http://www.iem.rwth-aachen.de/mirrors/www.fwtk.org/fwtk/faq/faq.html#0.2 However, you are right, it is updated today. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 07:48 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id HAA23448 Thu, 11 Apr 2002 07:48:39 -0400 (EDT) From: "Michael V. Plunkett" To: "fwtk-users" Subject: [fwtk-users] Proxy server plug gateway trouble Date: Wed, 10 Apr 2002 14:32:16 -0400 Message-ID: MIME-Version: 1.0 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C1E09C.835CEDB0" Content-Length: 6006 Status: RO This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C1E09C.835CEDB0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, I have an application opening a connection to a specific ip address and port but it comes from a specific ip address but the port is random for every connection. How do I set my firewall up to allow this. It is a fwtk firewall running on a FreeBSD box version 4.2. We use plug-gateways. Thank You MIke --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------=_NextPart_000_0001_01C1E09C.835CEDB0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

I have an application opening a connection to a = specific ip address and port

 but it comes from a specific ip address but the = port is random for every connection.

 

How do I set my firewall up to allow this.

 

It is a fwtk firewall running on a FreeBSD box version = 4.2.

We use plug-gateways.

 

Thank You

MIke

 

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com ------=_NextPart_000_0001_01C1E09C.835CEDB0-- From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 08:51 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id IAA23626 Thu, 11 Apr 2002 08:51:37 -0400 (EDT) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 11 Apr 2002 08:58:21 -0400 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: Proxy server plug gateway trouble In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 743 Status: RO At 02:32 PM 4/10/02 -0400, Michael V. Plunkett wrote: >--> > >Hi, > > > >I have an application opening a connection to a specific ip address and port > > but it comes from a specific ip address but the port is random for every > connection. > > > >How do I set my firewall up to allow this. Use plug-gw - the plug doesn't care what source port the connection request comes from, it only looks at the destination port. Configure the application to connect to the firewall on the same port, then configure the plug-gw to connect onward to the original destination. -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 09:57 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA23809 Thu, 11 Apr 2002 09:57:16 -0400 (EDT) From: "Michael V. Plunkett" To: "fwtk-users" Subject: [fwtk-users] Re: Proxy server plug gateway trouble Date: Thu, 11 Apr 2002 09:53:19 -0400 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii" Content-Length: 1863 Status: RO Rick, I was wondering if you see anything wrong with this because it doesn't work I have a machine with 2 nic cards one on the 192.168.105 network and one on the 192.168.139 network. Now the machine I want to connect from is on the 192.168.50 network My fwtk.sh reads as follows usr/local/libexec/plug-gw -daemon 2460 and my netperm-table plug gateway:port 2460 192.168.105.* -plug-to 192.168.50.62 -port 2460 We are trying to connect to a Sybase sql server using client software. Just to see if I have a connection if I telnet from 192.168.50.62 to 192.168.105.110 port 2460 I get a quick connection and then it drops And the same thing if I telnet from 192.168.105.110 to 192.168.50.62 port 2460. But when the client software runs we get a plug denial Please help Mike -----Original Message----- From: Rick Murphy [mailto:rmurphy@itm-inst.com] Sent: Thursday, April 11, 2002 7:58 AM To: fwtk-users Subject: [fwtk-users] Re: Proxy server plug gateway trouble At 02:32 PM 4/10/02 -0400, Michael V. Plunkett wrote: >--> > >Hi, > > > >I have an application opening a connection to a specific ip address and port > > but it comes from a specific ip address but the port is random for every > connection. > > > >How do I set my firewall up to allow this. Use plug-gw - the plug doesn't care what source port the connection request comes from, it only looks at the destination port. Configure the application to connect to the firewall on the same port, then configure the plug-gw to connect onward to the original destination. -Rick --- You are currently subscribed to fwtk-users as: mvp@chappy.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 11:01 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA24064 Thu, 11 Apr 2002 11:01:49 -0400 (EDT) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 11 Apr 2002 11:04:54 -0400 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: Proxy server plug gateway trouble In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 617 Status: RO At 09:53 AM 4/11/02 -0400, Michael V. Plunkett wrote: >My fwtk.sh reads as follows > >usr/local/libexec/plug-gw -daemon 2460 > >and my netperm-table > >plug gateway:port 2460 192.168.105.* -plug-to 192.168.50.62 -port 2460 that should be plug-gw: port 2460 ... along with plug-gw: permit-hosts 192.168.105.* If you're using this for Sybase, you might want to look into using the sql-gw proxy. It understands the underlying TNS protocol. -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 12:55 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA24584 Thu, 11 Apr 2002 12:55:32 -0400 (EDT) From: "Michael V. Plunkett" To: "fwtk-users" Subject: [fwtk-users] Re: Proxy server plug gateway trouble Date: Thu, 11 Apr 2002 12:08:56 -0400 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii" Content-Length: 1054 Status: RO Rick, I can't seem to find information about the sql-gw proxy. Is it part of fwtk. Thanks Mike -----Original Message----- From: Rick Murphy [mailto:rmurphy@itm-inst.com] Sent: Thursday, April 11, 2002 10:05 AM To: fwtk-users Subject: [fwtk-users] Re: Proxy server plug gateway trouble At 09:53 AM 4/11/02 -0400, Michael V. Plunkett wrote: >My fwtk.sh reads as follows > >usr/local/libexec/plug-gw -daemon 2460 > >and my netperm-table > >plug gateway:port 2460 192.168.105.* -plug-to 192.168.50.62 -port 2460 that should be plug-gw: port 2460 ... along with plug-gw: permit-hosts 192.168.105.* If you're using this for Sybase, you might want to look into using the sql-gw proxy. It understands the underlying TNS protocol. -Rick --- You are currently subscribed to fwtk-users as: mvp@chappy.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 13:35 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id NAA24704 Thu, 11 Apr 2002 13:35:50 -0400 (EDT) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Re: Proxy server plug gateway trouble Date: Thu, 11 Apr 2002 10:47:40 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1644 Status: RO I believe it's an add-on or patch. It's not part of the main distribution. -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Michael V. Plunkett [mailto:mvp@chappy.com] > Sent: Thursday, April 11, 2002 9:09 AM > To: fwtk-users > Subject: [fwtk-users] Re: Proxy server plug gateway trouble > > > Rick, > > I can't seem to find information about the sql-gw proxy. > Is it part of fwtk. > > > Thanks > Mike > > > > -----Original Message----- > From: Rick Murphy [mailto:rmurphy@itm-inst.com] > Sent: Thursday, April 11, 2002 10:05 AM > To: fwtk-users > Subject: [fwtk-users] Re: Proxy server plug gateway trouble > > At 09:53 AM 4/11/02 -0400, Michael V. Plunkett wrote: > >My fwtk.sh reads as follows > > > >usr/local/libexec/plug-gw -daemon 2460 > > > >and my netperm-table > > > >plug gateway:port 2460 192.168.105.* -plug-to 192.168.50.62 > -port 2460 > > that should be > > plug-gw: port 2460 ... > along with > plug-gw: permit-hosts 192.168.105.* > > > If you're using this for Sybase, you might want to look into > using the > sql-gw proxy. > It understands the underlying TNS protocol. > -Rick > > > --- > You are currently subscribed to fwtk-users as: mvp@chappy.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 13:46 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id NAA24744 Thu, 11 Apr 2002 13:46:11 -0400 (EDT) Message-ID: Date: Thu, 11 Apr 2002 13:55:11 -0400 From: Keith Young Reply-To: "fwtk-users" Organization: V-ONE User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.4.1) Gecko/20020314 Netscape6/6.2.2 X-Accept-Language: en-us MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Re: Proxy server plug gateway trouble Content-Transfer-Encoding: 7bit List-Unsubscribe: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Length: 514 Status: RO >> I can't seem to find information about the sql-gw proxy. >> Is it part of fwtk. Michael St. Laurent wrote: > I believe it's an add-on or patch. It's not part of the main distribution. > > Actually, you want Ark's sybase-gw, which is available at: http://www.fwtk.org/fwtk/patches/patches.html#3.16 -- -- --Keith Young -kyoung@v-one.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Apr 11 17:07 EDT 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id RAA25445 Thu, 11 Apr 2002 17:07:12 -0400 (EDT) Date: Thu, 11 Apr 2002 17:19:06 -0400 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Proxy server plug gateway trouble Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from mvp@chappy.com on Wed, Apr 10, 2002 at 02:32:16PM -0400 X-Virus-Scanned: at The OSIS Center by AMaViS-perl11-milter (http://amavis.org/) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 968 Status: RO On Wed, Apr 10, 2002 at 02:32:16PM -0400, Michael V. Plunkett wrote: > I have an application opening a connection to a specific ip address and > port > but it comes from a specific ip address but the port is random for > every connection. > > How do I set my firewall up to allow this. > > It is a fwtk firewall running on a FreeBSD box version 4.2. > We use plug-gateways. The source port may be random, but surely the destination port must be the same, or how else would the server know where to listen? What are the application and the protocol/service involved? -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com