In message <9303040303 .
AA22705 @
ICD .
Teradyne .
COM> jxh @
icd .
teradyne .
com (Jim
Hickstein) write:
|My archie client seems to want me to let UDP packets to ports >1000
|through my router to/from my firewall. Isn't this a Bad Idea? Must I
|tell my users that they should telnet somewhere, instead?
The Archie servers listens on port 1525, so I guess that if you just allow
this port to/from certian archie servers then you are pretty covered, though
this could still be a hole. Also it shouldn't be a big problem to proxy this
service.
Another option, which I'm not sure how practical it is, is to purchase
an Archie "client server", this is a telnet client to which you connect and
ask querys, the "server" connects through prospero to a "real" Archie server.
You should be able to get more info from bajan @
bunyip .
com .
Hope this helps,
--Amos Shapira
CS System Group, Hebrew University, Jerusalem, Israel
amoss @
cs .
huji .
ac .
il
References:
|
|
