Re: [hylafax-users] problem with cypheus+firewall

[Bill Binko <bill-sender-4b2fd6@binko.net>]

Marco,
	Your problem is that the firewall is not setup to handle FTP
over ports other than the standard ones (20/21).  Because of the way FTP
works (both PASV and normal) firewall systems like Netfilter (which
Shorewall is based on) need to be told that there is FTP-style traffic
on non-standard ports.  

	Netfilter has an excellent support community with lists hosted
at http://lists.netfilter.org.

	There, I found this post that seems to answer your question:
http://lists.netfilter.org/pipermail/netfilter/2002-February/030535.php

	Basically, it seems that all you need to do is setup the ftp
modules to support both sets of ports.

Hope this helps

Binko


> -----Original Message-----
> From: hylafax-users-bounce@hylafax.org 
> [mailto:hylafax-users-bounce@hylafax.org] On Behalf Of Marco Manzan
> Sent: Thursday, July 24, 2003 10:09 AM
> To: hylafax-users@hylafax.org
> Subject: [hylafax-users] problem with cypheus+firewall
> 
> 
> hi
> 
> I'm trying to use cypheus as a windows client, the hylafax 
> server is behind a 
> firewall (Linux Mandrake with shorewall ) the port 4559 is 
> open fot tcp and 
> udp protocols, but I cant send faxes, cypheus alwais opens 
> others ports and 
> so the firewall cuts the communication, I tracked the 
> communication with 
> sniffit and I found that during the communication with port 
> 4559 a PASV 
> protocol request is sent, so I suspect the connection to the 
> data port is 
> alwais started by the client and stopped by the firewall, I'm 
> guessing right 
> ?
> if not I'm configuring something the wrong way, by the way in cypheus 
> configuration the Use FTP Passive Mode is disabled.
> 
> thankyou for any hints
> 
> Marco
> -- 
>  _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
> |Marco Manzan               Email: manzan@univ.trieste.it     |
> |Tel:   (+39) 040 5583506   Fax  : (+39) 040  572033          |
> |Dipartimento di Ingegneria Navale, del Mare e per l'Ambiente |
> |Universita' degli Studi di Trieste                           |
> |piazzale Europa 1, 34127 TRIESTE                             |
> |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
> 
> 
> ____________________ HylaFAX(tm) Users Mailing List 
> _______________________
>   To subscribe/unsubscribe, click 
> http://lists.hylafax.org/cgi-bin/lsg2.cgi
>  On UNIX: mail -s 
> unsubscribe hylafax-users-request@hylafax.org < /dev/null
>   *To learn about commercial HylaFAX(tm) support, mail 
> sales@hylafax.org.*
> 
> 

____________________ HylaFAX(tm) Users Mailing List _______________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
 On UNIX: mail -s unsubscribe hylafax-users-request@hylafax.org < /dev/null
  *To learn about commercial HylaFAX(tm) support, mail sales@hylafax.org.*