Re: ipfilter outgoing

2005-02-16 Thread Sandy Rutherford
> On Sun, 13 Feb 2005 17:43:20 +0100, > Erik Norgaard <[EMAIL PROTECTED]> said: > dick hoogendijk wrote: >> I have configures pure-ftpd to use a restrict set op known ports to the >> outside. >> I also openen up 5999 already. >> >> Most problems I encounter are for streaming media.

Re: ipfilter outgoing

2005-02-13 Thread Erik Norgaard
dick hoogendijk wrote: I have configures pure-ftpd to use a restrict set op known ports to the outside. I also openen up 5999 already. Most problems I encounter are for streaming media. This is blocked most of the time. Are these random ports or always the same? Dunno, I think they are, but it is b

Re: ipfilter outgoing

2005-02-13 Thread dick hoogendijk
On Sun, 13 Feb 2005 15:46:09 +0100 Erik Norgaard <[EMAIL PROTECTED]> wrote: > Beware, that cvsup connects to port 5999, and passive ftp-data > connects to some port > 1024 depending on server config (however I > think default is/should be > 49151). I have configures pure-ftpd to use a restrict

Re: ipfilter outgoing

2005-02-13 Thread Erik Norgaard
dick hoogendijk wrote: It's difficult to program all outgoing filter rules in ipf. Every now and then I bumb into a blocked connection that I did want to work in the first place. Only because an outgoing port was/is blocked. What is the most secure way to do things? Block all outgoing and open up w

ipfilter outgoing

2005-02-13 Thread dick hoogendijk
It's difficult to program all outgoing filter rules in ipf. Every now and then I bumb into a blocked connection that I did want to work in the first place. Only because an outgoing port was/is blocked. What is the most secure way to do things? Block all outgoing and open up what I wnat or can I us