lkml.org 
[lkml]   [1996]   [Apr]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: IP MASQUERADING broken again from v1.3.81 onwards
Date
> port 20 is ftp-data, but this port is not used even if you do *not* use
> a firewall. the client and the server negotiate which port to use
> by using the PORT command, part of the ftp-protocoll.

Yes, but port 20 is normally used as remote port for the ftp-data
connection going to that local (negotiated) port. So that's why you
will normally see it listed using ipfwadm -Mln.

> you can *NEVER* ftp through a "closed" firewall except when using
> passive mode, see the PASV command, part of the ftp-protocoll.

This depends on your definition of a "closed" firewall. The special
treatment of the FTP PORT command *does* allow you to use it in
combination with IP masquerading, *without* using passive mode.

--
-- Jos Vos <jos@xos.nl>
-- X/OS Experts in Open Systems BV | Phone: +31 20 6938364
-- Amsterdam, The Netherlands | Fax: +31 20 6948204


\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.121 / U:4.568 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site