Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Scab on May 12, 2001, 06:34:02 PM

Title: Ports over 1024
Post by: Scab on May 12, 2001, 06:34:02 PM

Is there any way I can open up ports 1024 and above on the firewall .... At this point security is NOt an issue (but it WILL be when it goes live). Can I open up all these ports for testing purposes ?/ I f so How ?? PLease

:-))

Title: Re: Ports over 1024
Post by: Darrell May on May 12, 2001, 11:27:50 PM

Scab wrote:
>
> Is there any way I can open up ports 1024 and above on the
> firewall .... At this point security is NOt an issue (but it
> WILL be when it goes live). Can I open up all these ports for
> testing purposes ?/ I f so How ?? PLease
>
> :-))

Ports above 1024 are open outbound for all local users.  Inbound they are blocked.

What specific ports do you need opened?  Is this for tcp/udp?

If you don't need/want the firewall set your server to server-only mode.

Darrell

Title: Re: Ports over 1024
Post by: Scab on May 12, 2001, 11:56:04 PM

What I am trying to do is portfoward incoming ftp on port 666 to a 192.168.x.x address on the LAN on port 21 ...Got that working ..BUT .....

Because ftp uses a random port above 1024 it seems to be denying the returning packets ....

Any Clues ?

Title: Re: Ports over 1024
Post by: Charlie Brady on May 13, 2001, 03:03:41 AM

Scab wrote:
>
> What I am trying to do is portfoward incoming ftp on port 666
> to a 192.168.x.x address on the LAN on port 21 ...Got that
> working ..BUT .....
>
> Because ftp uses a random port above 1024 it seems to be
> denying the returning packets ....
>
> Any Clues ?

ftp is non-trivial to post-forward, since it uses two TCP connections, and the port number used for the second connection is communicated as part of the chtichat on the first connection. You need to read up on the FTP protocol, particularly the PASV option.

Charlie

Title: Re: Ports over 1024
Post by: Jules on May 13, 2001, 10:27:14 PM

Read up on it and post my findings huh ??

:-)


ok ... I can do that ....

Thanks

Title: Re: Ports over 1024
Post by: Luke Drumm on May 14, 2001, 04:59:43 AM

I've found the the ipchains docs found in the standard installation are pretty good.