I agree with Marcus concerning the probloms in FTP & possibly IPV6
will repair/replace it. For now I suspect that the answer is a
Firewall that will only allow an Inward port 20 connection if
the inside node already had a port 21 outward connection (No, I
do not mean via "established" I mean the firewall should beep track
of what connections exist).
This will work with current systems without retrofit.
Now on reclection I suspect macrosloth is different from the IWI site
(Marcus' code) since the lockup occurs on connection before I even
have a chance to issue PASV - that worked to IWI.
Warmly,
Padgett
Follow-Ups:
|
|