[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Off Topic : ftp and firewall issues



On 2000-10-02 21:04:53, William Jensen wrote:
> Call me goofy because my firewall decided it was going to stop working.  I have
> the following line in for allowing ftp info back and forth...
> 
> $IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 -j ACCEPT
> 
> I also tried..port 21
> 
> $IPT -A INPUT -p tcp ! --syn --source-port 21 --destination-port 1024:65535 -j ACCEPT
> 
> I can ftp into a ftp site and move around directories but I cannot see anything
> on a ls.  What have I wrought?

ftp is (normal) active mode will open a _new_ data socket to your ftp
server (e.g. --syn) at some port (>=1024).


/Allan
-- 
Allan M. Wind			email: allanwind@mediaone.net
P.O. Box 2022			finger: awind@digit-safe.dyndns.org (GPG/PGP)
Woburn, MA 01888-0022		icq: 44214251
USA



Reply to: