Hello LEAF World,

I'm setting up a log recording system to hard disk that also exports the
logs to another machine when needed.
Trying to use TFPT (because there is a client as a LEAF package available)
gives problems with the firewall.
"Normal" protocols use a well-known port to the server and a client-chosen
return port. This allows Shorwall`s stateful packet filter to open the
return port and all is OK. TFTP chooses it's ports according to some hash
values at each end so that the returning UDP packets do not have the same
ports numbers as the requests.
The Firewall then drops these return packets as not being allowed (my
rulebase only allows defined port access from the local net). As I have
several hosts in the internal net, it seems impossible to predict all the
possible ports to allow (and, anyway, it's lousy security). Is there a way
to configure Shorewall to recognise the 'statefulness' (grammatically bad,
but it describes the problem) of TFTP ? OR is there a "proper" FTP client
anywhere ?

Many thanks,

Robert von knobloch
Blach Forest - Germany



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to