ftp problem

[fbsd_user]

Opening the high order ports is a security risk. This is a long
standing problem with the FTP protocol.  If you are going to have a
FTP server on your FBSD box being accessible from the public
internet, you should be using the built in FTP proxy in ipfilter
firewall. The ftp proxy option only opens the single ftp data high
order port number being used.  This is much more sure than exposing
all the high order ports.

-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Pietro
Cerutti
Sent: Tuesday, December 13, 2005 9:09 AM
To: Imran Imtiaz; FreeBSD
Subject: Re: ftp problem


On 12/13/05, Imran Imtiaz <imran at thelakecity.com.pk> wrote:
> they are comming on xl0 interface

Then you should enable in/outbound traffic on your xl0 interface,
for
the ports from 49152 through 65535, used for the data-channel
connection.

--
Pietro Cerutti
<pietro.cerutti at gmail.com>

Beansidhe - SwiSS Death / Thrash Metal
<www.beansidhe.ch>

Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"