Bugtraq: Re: ftpd: the advisory version

[mikael.olsson () ENTERNET SE (Mikael Olsson)]

"D. J. Bernstein" wrote:
> [snip]
> Internet Explorer uses PASV. What makes you think that requiring PASV
> will noticeably increase
> the level of user annoyance at your firewall?
Because Internet Explorer 5 does NOT use PASV by default any more;
it defaults to PORT.
That is:
* If you set IE5 to display FTP as a "file explorer", it uses PORT.
  This is the default mode.
* If you set IE5 to "display FTP as a web page", is uses PASV.

Probably some geek coder thought "ah you can be active with file
explorer so we'll use active mode, while web pages are pretty passive
things, so we'll use passive mode".

Duh.

--
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 ÖRNSKÖLDSVIK
Phone: +46 (0)660 29 92 00         Direct: +46 (0)660 29 92 05
Mobile: +46 (0)70 66 77 636        Fax: +46 (0)660 122 50
WWW: http://www.enternet.se/       E-mail: mikael.olsson () enternet se