Re: RELATED connections and the feeling of security

[Martijn Lievaart <m@rtij.nl>]

Pascal Hambourg wrote:
> Hello,
>
> Hugo Mildenberger a écrit :
> > should the ftp-conntrack helper expose arbitrary ports on the
> > originating host?
> Yes it should, for the following two reasons :
> 1) The host explicitly asked for it over the FTP control connection.
> 2) The firewall administrator allowed it by loading the FTP conntrack
> module.
No, not arbitrary ports. The port asked for in the port command should
be opened (and it is).

M4