Re: ftp and firewalling

[Alois Treindl <alois@xxxxxxxx>]

On Sun, 6 May 2001, Alois Treindl wrote:
> 
> I allow now only ports 61250:61299 as data ports in passive ftp.
> 
> I find that this set of rules works, to allow both active ftp (like
> from an ncftp client) and passive ftp (like from netscape browser):

I have to withdraw this statement: it does not work.
It seems to have worked accidentally when I tested at first, but now
I suddenly get different ports assigned.

I am back to field 1.
I seem unable to setup ftp, without opening all ports above 1024 on both
the director and the VIP.