fbsd_user at a1poweruser.com
Tue Dec 13 07:11:38 PST 2005
Opening the high order ports is a security risk. This is a long
standing problem with the FTP protocol. If you are going to have a
FTP server on your FBSD box being accessible from the public
internet, you should be using the built in FTP proxy in ipfilter
firewall. The ftp proxy option only opens the single ftp data high
order port number being used. This is much more sure than exposing
all the high order ports.
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Pietro
Sent: Tuesday, December 13, 2005 9:09 AM
To: Imran Imtiaz; FreeBSD
Subject: Re: ftp problem
On 12/13/05, Imran Imtiaz <imran at thelakecity.com.pk> wrote:
> they are comming on xl0 interface
Then you should enable in/outbound traffic on your xl0 interface,
the ports from 49152 through 65535, used for the data-channel
<pietro.cerutti at gmail.com>
Beansidhe - SwiSS Death / Thrash Metal
Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
freebsd-questions at freebsd.org mailing list
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions