Off Topic : ftp and firewall issues

[William Jensen]

Call me goofy because my firewall decided it was going to stop working.  I have
the following line in for allowing ftp info back and forth...

$IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 -j 
ACCEPT

I also tried..port 21

$IPT -A INPUT -p tcp ! --syn --source-port 21 --destination-port 1024:65535 -j 
ACCEPT

I can ftp into a ftp site and move around directories but I cannot see anything
on a ls.  What have I wrought?

Grumbling,

Wm

Re: Off Topic : ftp and firewall issues

[Allan M. Wind]

On 2000-10-02 21:04:53, William Jensen wrote:
 Call me goofy because my firewall decided it was going to stop working.  I 
 have
 the following line in for allowing ftp info back and forth...
 
 $IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 
 -j ACCEPT
 
 I also tried..port 21
 
 $IPT -A INPUT -p tcp ! --syn --source-port 21 --destination-port 1024:65535 
 -j ACCEPT
 
 I can ftp into a ftp site and move around directories but I cannot see 
 anything
 on a ls.  What have I wrought?

ftp is (normal) active mode will open a _new_ data socket to your ftp
server (e.g. --syn) at some port (=1024).


/Allan
-- 
Allan M. Wind   email: [EMAIL PROTECTED]
P.O. Box 2022   finger: [EMAIL PROTECTED] (GPG/PGP)
Woburn, MA 01888-0022   icq: 44214251
USA