RE: Passive FTP

["David Gillett" <gillettdavid () fhda edu>]

  If it's a "real" stateful firewall, it will monitor FTP control
traffic and only open data ports as necessary.  If it's an el cheapo
port filter, then yes, you must manually make your server reachable 
on whatever data port passive clients choose to use.

David Gillett


> -----Original Message-----
> From: Roberto Alcantara [mailto:roberto () fortalnet com br]
> Sent: Tuesday, May 31, 2005 6:09 AM
> To: security-basics () securityfocus com
> Subject: Passive FTP
>
>
> Guys, to able my FTP users in passive mode need I realy accept in my 
> firewall connections from 1024-65535 ports ?
>
> Best regards,
> Roberto