Apologies for the oddball quoting, but I seem to have deleted the original
post by mistake.
At 21:34 28/11/00 +0000, Andreas Horvath wrote:
>should i have to install a ftp proxy application or is there any other
>way to open up the fw to accept only ftp data connections?
>we're using linux kernel 2.2.14 w/ ipchains and masquerading
You need to insert (possibly even build) the ip_masq_ftp module if I
recall correctly(1). From there, you will need to allow connections to
your firewall on ports 1025-4999(2) from the ftp-data port, 20.
1) Its been awhile since I've setup a linux firewall, please take all
advice with a tablespoon of salt.
2) This are the 'standard' ports, but thats the great thing about
standards. So many to choose from.
johnny
"They called me mad, and I called them mad, and damn them, they outvoted me."
-- Nathaniel Lee, on being consigned to a mental
institution, circa 17th century.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]