> [Solaris ftpd] <---> [ Smartwall ] <---> [client program]
This is, indeed, the correct diagram...
> The ftp-gw doesn't use a fixed port for it's data connection back to the
> client. It uses a random high port. (There is a Gauntlet patch to allow >
> you to force this to a particular port number.)
OK, but shouldn't the reply from the server to the ftp-gw daemon on the
firewall still originate from port 20? I don't care what happens on the
other side of the firewall, just what I have to worry about filtering and
proxying.
> -Rick
Jesse Whyte
Security Analyst
State of Tennessee
OIR/Telecommunications
|
|
