Opening the high order ports is a security risk. This is a long standing problem with the FTP protocol. If you are going to have a FTP server on your FBSD box being accessible from the public internet, you should be using the built in FTP proxy in ipfilter firewall. The ftp proxy option only opens the single ftp data high order port number being used. This is much more sure than exposing all the high order ports.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pietro Cerutti Sent: Tuesday, December 13, 2005 9:09 AM To: Imran Imtiaz; FreeBSD Subject: Re: ftp problem On 12/13/05, Imran Imtiaz <[EMAIL PROTECTED]> wrote: > they are comming on xl0 interface Then you should enable in/outbound traffic on your xl0 interface, for the ports from 49152 through 65535, used for the data-channel connection. -- Pietro Cerutti <[EMAIL PROTECTED]> Beansidhe - SwiSS Death / Thrash Metal <www.beansidhe.ch> Windows: "Where do you want to go today?" Linux: "Where do you want to go tomorrow?" FreeBSD: "Are you guys coming or what?" _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
