Re: Variations of firewall ruleset bypass via FTP

[Carson Gaspar <carson () taltos org>]

--On Thursday, October 10, 2002 10:40 PM -0400 "Paul D. Robertson" 
<proberts () patriot net> wrote:

> One of the things that makes FTP such a bad case is that protecting the
> server means going to active FTP and protecting the clients means going
> to  PASV mode.  So there's not a natural protection point that allows
> both to  be satisfied.

An application proxy that does PASV->PORT translation achieves exactly 
this. Trivial to do (and was done in FWTK ftp-gw years ago).

--
Carson
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards