At 11:53 13/12/00 +0100, Ulrich Flegel wrote:
> >>>>> On Mon, 11 Dec 2000, mouss said:
>
> m> I agree that passive ftp is the way, but until lately, MS IE were
> m> unable to work it out. one can say, ok, don't use IE, but heh, I can't
> m> just ask all my coworkers to switch to another OS/browser. besides,
> m> the only viable alternative seems netscape and it is too buggy...
>
>About three years ago I wrote an multi-application layer protocol
>aware proxy software that is able to convert active ftp sessions to
>passive sessions and vice versa. You can enforce that only passive
>(or active) session leave your network. I never bothered to work on
>that piece of code since Delegate became much more comprehensive.
>
>There are commercial firewalls that can do this, such as Interceptor
>by Technologic. IMHO it is not that hard implement.
I fully agree, but then you're bringing to me to my favourite:
proxies are better. however I then fear filtering spirits are coming to
knock me very hard:)
regards,
mouss
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
