On Wed, Jul 09, 2008 at 18:46:03 -0700, stan <[EMAIL PROTECTED]> wrote: > > One was SYN packets with random destination ports at the high end of the > range. I'm assuming this was something to do with passive FTP. Why > they should show up I'm not sure since I have FTP enabled and RELATED, > ESTABLISHED status ACCEPTed.
I don't think that RELATED covers things like FTP. It is meant to cover IMCP packets related to a connection. I think there is a module for recognizing related FTP traffic, but I suspect you need to manually use it. -- fedora-list mailing list [email protected] To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
