Re: Active ftp connection

On Sat, 18 Dec 2004, wsx wrote:

> Hello dear friends...
>
> I have a trouble. My FTP server must have an active ftp connection.
> It means what in ipfw rules I must allow outgoing connections(like ipfw add
> allow tcp from me to any keep-state).
> But I don't want use this rule. I want to restrict my outgoing connections. Is

Active FTP-data goes from server IP:port 20 to client IP:random port.

You don't need to open ALL ourgoing traffic, just those coming from port 20
on your ftp server.


		Fer
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"