23 Oct
2000
23 Oct
'00
21:43
FTP is a total pain in the arse to firewall since there are incoming connections from the server/etc. Things that will help: Use an FTP proxy such as squid on the gateway server. Read Kurt's Closet on November 1 (sorry, you'll have to wait =) as I discuss some problems/features/solutions for this type of thing in Linux. Upgrade to 2.4 which has a stateful packet filter. Kurt Seifried - seifried@securityportal.com SecurityPortal, your focal point for security on the net http://www.securityportal.com/