> I have a filter in place (ftp.in & ftp.out) and it works almost 100%
> When user dials in, they get:
> 1 full access to our web server
> 2. full access to our mail server
> 3. full access to our ftp server *if* they use an ftp client!
>
> If they try to get files from ftp server using web browser, it doesn't
> happen.
>
> I am not sure if web browsers use port 21 for ftp connections.
Most browsers use passive FTP, which may or may not (most likely does not)
use port 21. My guess (without consulting the O'Reilly 'Building
Firewalls' book, and therefore sticking my neck way out) would be that
you'll need to allow both TCP port 21 and ports > 1023 going back to the
client from your FTP server.
When you get it working, would you mind sending the final filter out to me
(or maybe the entire list)? Might come in handy sometime...
Pete Kruckenberg
pete@inquo.net