Re: [ml] Server FTP - iptables

On Mon, June 25, 2007 11:35, Fabrizio G. Ficca (aka Fab) wrote:
> Il server e' configurato per l'FTP Passivo.
> ...
> Mi chiedo, non e' un po' troppo lassista far passare tutto dalla 1024: in
> poi?
cito http://www.faqs.org/rfcs/rfc959.html

PASSIVE (PASV)

This command requests the server-DTP to "listen" on a data
port (which is not its default data port) and to wait for a
connection rather than initiate one upon receipt of a
transfer command.  The response to this command includes the
host and port address this server is listening on.

al massimo puoi decidere di chiudere anche le well known oltre che le
reserved, ma prima o poi qualche porta la devi lasciare aperta per il pasv
;-)

ciao

-- 
Marco Bonetti
Slackintosh Linux Project Developer: http://www.slackintosh.org
Linux-live for powerpc: http://www.slackintosh.org/pub/rsync/mb/linux-live
My webstuff: http://sidbox.homelinux.org

My GnuPG key id: 0x86A91047