Inspiration – Go Open Source

rainbow

Archive for the ‘FTP Server’ Category

IPFW – Passive Port Untuk FTP

Posted by admin on February 17th, 2010 

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

# Firewall
IPF="ipfw -q add"
ipfw -q -f flush
 
#loopback
$IPF 10 allow all from any to any via lo0
$IPF 20 deny all from any to 127.0.0.0/8
$IPF 30 deny all from 127.0.0.0/8 to any
$IPF 40 deny tcp from any to any frag
 
# statefull
$IPF 50 check-state
$IPF 60 allow tcp from any to any established
$IPF 70 allow all from any to any out keep-state
$IPF 80 allow icmp from any to any
 
$IPF 110 allow tcp from any to any 21 setup keep-state
$IPF 120 allow tcp from any to any 20 setup keep-state
$IPF 130 allow tcp from any to any 22 in
$IPF 140 allow tcp from any to any 22 out
$IPF 150 allow tcp from any to any 25 in
$IPF 160 allow tcp from any to any 25 out
$IPF 170 allow udp from any to any 53 in
$IPF 175 allow tcp from any to any 53 in
$IPF 180 allow udp from any to any 53 out
$IPF 185 allow tcp from any to any 53 out
$IPF 200 allow tcp from any to any 80 in
$IPF 210 allow tcp from any to any 80 out
$IPF 382 allow tcp from any to any 30000-50000 setup keep-state
$IPF 400 deny ip from me to table\(1\)
$IPF 410 deny ip from table\(1\) to me
 
# deny and log everything
$IPF 500 deny log all from any to any