In message <9303040303 .
COM> jxh @
|My archie client seems to want me to let UDP packets to ports >1000
|through my router to/from my firewall. Isn't this a Bad Idea? Must I
|tell my users that they should telnet somewhere, instead?
The Archie servers listens on port 1525, so I guess that if you just allow
this port to/from certian archie servers then you are pretty covered, though
this could still be a hole. Also it shouldn't be a big problem to proxy this
Another option, which I'm not sure how practical it is, is to purchase
an Archie "client server", this is a telnet client to which you connect and
ask querys, the "server" connects through prospero to a "real" Archie server.
You should be able to get more info from bajan @
Hope this helps,
CS System Group, Hebrew University, Jerusalem, Israel