Re: Linux firewall vs. other products
Le 2000-07-17 18:36:52 +0200, Sven Burgener écrivait :
> On Mon, Jul 17, 2000 at 01:11:15PM +0200, Ralf G. R. Bergs wrote:
> > On Mon, 17 Jul 2000 11:32:41 +0200 (CEST), Rickard Lind wrote:
> > >connection to send the file(s). A "mere" packet filter
> > >cannot handle this which I believe is why the Linux
> > >kernel has a FTP module to handle this. I'm not sure
> Yes, the story of active and passive FTP.
> > This is correct. It works pretty well, I used to use the FTP IP masquerading
> > module for quite some time, and had only smallish problems.
> The module; is it for allowing active or passive FTP transfers?
If I am not mistaken, this module will allow active ftp transfers,
by recognising the ftp-data connexion associated with the ftp
connexion (provided you use the connexion tracking mechanism).