Opening ports 20 and 21 locally just allows remote users to be able to connect to YOUR ftp server and not the other way round. Noah.

-----Original Message----- From: remote [mailto:remote@leat.ruhr-uni-bochum.de] Sent: 19 April 2004 14:00 To: SUSE-SECURITY Subject: Re: [suse-security] Configuring SuSEfirewall2 for FTP access

...

Check your "services option" in /etc/sysconfig/SuSefirewall2. FTP ports must be declared in the "EXT" services.

The ports 20 and 21 are declared in the "EXT" services.

...

Actually it is the other way round. You machine should have its high ports open and the server should have ports 20 and 21 open.

I don´t get that. I thought passive FTP is used so that I don´t have to keep these higher ports open if I only want to download stuff. If not, what´s the point ?

-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here