RE: Fw: FTP passive ports for firewalls

[Stuart Whyte <lists@xxxxxxx>]

Gareth,

Don't agree.  I have both those ports open, and I get NOTHING under
passive
mode.  (i.e. I can connect, logon, but then the connection times
out)

-----Original Message-----
From: Gareth Cook [mailto:g@xxxxxxx]
Sent: 21 January 2003 17:26
To: ukha_d@xxxxxxx
Subject: Fw: [ukha_d] Fw: FTP passive ports for firewalls


Not quite correct - if you enable passive mode ftp on the client (like IE
or GetRight) then ports 20 and 21 are enough

G.

Gareth Cook 
Technical Consultant 
IBM Early Deployment
Lotus Park, Staines, TW18 3AG
Office:  +44 (0) 1784 445 166
Mobile:  +44 (0) 7980 445 166
Fax:      +44 (0) 1784 499 166
Work: g@xxxxxxx 
Personal: g@xxxxxxx 
AIM Chat : TheBoyG 
MSN Chat : chat@xxxxxxx 

----- Forwarded by Gareth Cook/UK/IBM on 21/01/2003 17:23 -----

Discussion
Main Topic

"Dan" <dtoma@xxxxxxx>
Today 17:17

.
Subject:
.
Re: [ukha_d] Fw: FTP passive ports for firewalls
.
Category:



Hi Stuart,

You cannot enter to an internal FTP server just opening some ports... you
need something like an application gateway.
You must trigger upper ports (>1024) opening for output for any input
access to ports 20 and 21.

If you just forward ports 20 and 21 to an internal host, then you will be
able to connect to the FTP server (first step), but not to do any other
operation, like listing a directory or copy a file.

You can try to put the computer in DMZ.. then it will be directly exposed
to the Internet.

Look at the following page for more informations about accessing internal
services through the firewall.
http://www.homenethelp.com/web/howto/apps-behind-router.asp
.. but take care.. for FTP is not enough to open one port, like on that
page. Read user comments too.


It is not the same for telnet..you can pass only port 23 and you're
done.
The same for HTTP.

..but...FTP is a little bit different.

Dan
  ----- Original Message ----- 
  From: Stuart Whyte 
  To: 'ukha_d@xxxxxxx' 
  Sent: Tuesday, January 21, 2003 6:57 PM
  Subject: RE: [ukha_d] Fw: FTP passive ports for firewalls


  Dan, 

  Come INTO my firewall from the internet, to server inside.  I
have a 
linksys
  cable modem router/firewall.

  S.

  -----Original Message-----
  From: Dan [mailto:dtoma@xxxxxxx]
  Sent: 21 January 2003 16:41
  To: ukha_d@xxxxxxx
  Subject: Re: [ukha_d] Fw: FTP passive ports for firewalls


  Hi Stuart,

  Do you want to enter through the firewall to a internal host for
FTP, or 
to
  acces an outside FTP server?
  What kind of firewall do you have?

  Dan
    ----- Original Message ----- 
    From: Stuart Whyte 
    To: UKHA (E-mail) 
    Sent: Tuesday, January 21, 2003 6:03 PM
    Subject: [ukha_d] Fw: FTP passive ports for
firewalls


    Posted this to UKHA_Networking and got no joy. 
Anyone here not on 
that
  list
    know the answer?

    All,

    Does anyone know what the range of ports on my firewall
I have to open 
to
    get passive FTP through??  I have opened 20 and 21,
but I understand 
that
  I
    need to open up some high port numbers too??

    Cheers

    Stuart



   
************************************************************** 
    Franklin + Andrews is a business name of Franklin &
Andrews Limited 
    (Registered in England No 4408389), whose registered
office is at St 
Anne 
    House, Wellesley Road, Croydon, CR9 2UL 

    This email message and accompanying data transmitted
with it are for 
the 
    sole use of the intended recipient(s) and may contain
information that 
is 
    confidential. If you are not the intended recipient(s),
you are 
notified 
    that any use, dissemination, disclosure, distribution or
copying of 
this 
    message or data is prohibited.  If you have
received this email 
message in

    error, please notify us immediately and erase all copies
of this 
message 
    and attachments.


    [Non-text portions of this message have been
removed]


          Yahoo! Groups
Sponsor 
               
ADVERTISEMENT




    http://www.automatedhome.co.uk
    Post message: ukha_d@xxxxxxx 
    Subscribe:  ukha_d-subscribe@xxxxxxx 
    Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
    List owner:  ukha_d-owner@xxxxxxx
    List of UKHA Groups here - 
http://groups.yahoo.com/group/UKHA_Grouplists/

    Your use of Yahoo! Groups is subject to the Yahoo! Terms
of Service. 


  [Non-text portions of this message have been removed]


  http://www.automatedhome.co.uk
  Post message: ukha_d@xxxxxxx 
  Subscribe:  ukha_d-subscribe@xxxxxxx 
  Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
  List owner:  ukha_d-owner@xxxxxxx
  List of UKHA Groups here - 
http://groups.yahoo.com/group/UKHA_Grouplists/

  Your use of Yahoo! Groups is subject to 
http://docs.yahoo.com/info/terms/



  ************************************************************** 
  Franklin + Andrews is a business name of Franklin & Andrews
Limited 
  (Registered in England No 4408389), whose registered office is at St
Anne 
  House, Wellesley Road, Croydon, CR9 2UL 

  This email message and accompanying data transmitted with it are for
the 

  sole use of the intended recipient(s) and may contain information
that 
is 
  confidential. If you are not the intended recipient(s), you are
notified 

  that any use, dissemination, disclosure, distribution or copying of
this 

  message or data is prohibited.  If you have received this email
message 
in 
  error, please notify us immediately and erase all copies of this
message 

  and attachments.


  [Non-text portions of this message have been removed]


        Yahoo! Groups Sponsor 
             
ADVERTISEMENT




  http://www.automatedhome.co.uk
  Post message: ukha_d@xxxxxxx 
  Subscribe:  ukha_d-subscribe@xxxxxxx 
  Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
  List owner:  ukha_d-owner@xxxxxxx
  List of UKHA Groups here - 
http://groups.yahoo.com/group/UKHA_Grouplists/

  Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]


http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx
List of UKHA Groups here - http://groups.yahoo.com/group/UKHA_Grouplists/

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/




[Non-text portions of this message have been removed]


http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx
List of UKHA Groups here - http://groups.yahoo.com/group/UKHA_Grouplists/

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/



************************************************************** 
Franklin + Andrews is a business name of Franklin & Andrews Limited
(Registered in England No 4408389), whose registered office is at St Anne
House, Wellesley Road, Croydon, CR9 2UL 

This email message and accompanying data transmitted with it are for the
sole use of the intended recipient(s) and may contain information that is
confidential. If you are not the intended recipient(s), you are notified
that any use, dissemination, disclosure, distribution or copying of this
message or data is prohibited.  If you have received this email
message in 
error, please notify us immediately and erase all copies of this message
and attachments.


[Non-text portions of this message have been removed]

Yahoo! Groups Sponsor

ADVERTISEMENT

http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx
List of UKHA Groups here - http://groups.yahoo.com/group/UKHA_Grouplists/

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.