http://bugzilla.novell.com/show_bug.cgi?id=541954 User lnussel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=541954#c1 --- Comment #1 from Ludwig Nussel 2009-09-25 01:12:29 MDT --- (In reply to comment #0)

FW_LOAD_MODULES=ip_conntrack_ftp FW_SERVICES_ACCEPT_RELATED_EXT="0/0,tcp"

You must be joking. Disabling the firewall has the same effect. FW_CONFIGURATIONS_EXT="vsftpd" is what you are looking for (or pure-ftpd if you use that one). -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541954 User johanp@aditus.nu added comment http://bugzilla.novell.com/show_bug.cgi?id=541954#c3 --- Comment #3 from Johan Persson 2009-09-25 02:45:55 MDT --- Well, opening the firewall for FTP is a security whole no questions about it. I'm not an expert on firewalls and I'm sure there might be better ways of solving this, But my point is that the current setup with the checkbox "Open ports in Firewall" is misleading (especially for those who knows even less than I about ports and firewalls) since it gives the impression that the ftp will work with the firewall when in fact it will not. So it's a false simplicity If there are strong feelings about this can I then suggest that this tickbox is removed and instead replaced by a information message saying that the firewall needs to be manually configured to allow for FTP traffic? At least then the user will not be under the impression that the FTP will work. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=541954 http://bugzilla.novell.com/show_bug.cgi?id=541954#c4 Jozef Uhliarik changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |WONTFIX --- Comment #4 from Jozef Uhliarik 2010-02-09 16:08:05 UTC --- I am also not expert for firewall but I support only configuration from package of ftp vsftp/pure-ftp. There is only definition for SuSEfirewall2. It means definition which port will be open in SuSEfirewall2 and also rules if you enable checkbox "Open Port in Firewall" in this case it is port 21. User can to define passive port range but it is not open in firewall. I am not sure if it is good idea to add it. You are right it is security problem. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.