LinuxSA Mailing list archives

  From: <alcaron@senet.com.au>
  To  : David Fitch <davidf@parachilna.com>
  Date: Wed,  8 May 2002 13:18:52 +091800

Re: Firewall and FTP'ing

Quoting David Fitch <davidf@parachilna.com>:

> > > > The best workaround for me is use passive ftp (ie. 'pas'
> > > > command in ftp).
> > > Wrong way around.
> > 
> > hey? what is?  
> > If Wayne was talking about problems running an ftp server then fair
> > enough but that's not how I read it.

It's how I read it: can't see any real reason to deny outgoing connections,
unless he's in a restrictive corporate environment or he's very paranoid about
what his machines are doing.

> no hang on that doesn't explain it either, you use the ip_masq_ftp
> module to solve it if running an ftp server.  I can ftp into my
> machine fine from outside and I only have about 4 specific ports open.

That's one of the solutions I mentioned: see connection tracking :)

--
Michael Pearson


-------------------------------------------------
This mail sent through SE Net Webmail
http://webmail.senet.com.au
 

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject