Re: [masq] FTP and firewalls

[Clifford Hammerschmidt]

>
>ipchains -A input -j ACCEPT -y -p tcp -s 0.0.0.0/0 20 -d yourip 1024:65535

um, why bother running the firewall then? This is also the same an -P input
ACCEPT... your allowing anyone to connect from their port 20 (easy enough
to spoof) to your box on any port above 1023... not a great idea. Someone
using NMap could scan all your upper ports easily.

Is it that hard to type PASSIVE?

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]