There has been some work down with established connections, as mentioned in the howto,
which would allow passive connections out to work. Mostly it is best to use scp if at
all possible, and if not a DMZ is also a great idea.
--jc
> -----BEGIN PGP SIGNED MESSAGE-----
>
> I recently installed my first firewall at a customer's site running Mandrake 7.1..
>
> It was a classic setup, and I wish I had more examples than the HOWTO manuals.
>
> The Linux PC has two ethernet cards, one hooked up to the internet,
> the other, to their local network.
>
> Local network wants to use FTP, naturally.. Both via browsers, via "cute things"
> like GetRight, or just via their web browsers. I was forced to leave open
> a large hole, like ports 1024 -> 5999 and 6010: .. Is there a better way, short
> of installing Squid (the machine doesnt have the horsepower for squid)..
>
> Thanks, -turgut
>
> - --
> [EMAIL PROTECTED] - Put "Send PGP" in Subject to obtain my PGP signature.
> Find-It! Web Search Engine: http://find.egenet.com.tr
> http://bbsturk.bbs.tr
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3a-sha1
> Charset: noconv
>
> iQCVAwUBOWMk8zJjYwErN0xZAQGUWwP+LDKIvGQbPqg3Wr7sSAc47+xRDvnqD0kG
> oY6OGIHHi5e32jaHwghql85+W3csBrebsG/iYre9FyFM9p+ZCbU8bUgFQQL+cXy9
> x1D/K1eSn8fT8e8v/iGBDLzxCcgWLFuQvxR8gqmmI8GkgKOv/k8yzyrH0W16N3L7
> 0wXTxi6vq0k=
> =k4RT
> -----END PGP SIGNATURE-----
>
>
> Windows Error 01C: Uncertainty error. Uncertainty may be inadequate.
>
