On Mon, 2008-06-16 at 16:01 -0700, peasthope@shaw.ca wrote: > Folk, > > At Sun, 23 Mar 2008 20:27:40 -0400 Douglas A. Tutty wrote, > "... if you want to really understand it use > shorewall after reading shorewall-doc." > > ipmasq works but I want to use shorewall. > > I wonder why rules are needed for FTP but not > for POP3. In fact, a rule for POP3 produces a > complaint about "... unknown protocol 'pop3' ...". In an unusual move, the FTP server connects to the client: Two connections are maintained instead of just one. You can force FTP to just use the client to server connection by using passive mode, but given that doing so makes some operations problematic, it's kind of a last-resort mode. -- Paul Johnson baloo@ursine.ca
Attachment:
signature.asc
Description: This is a digitally signed message part