Re: FTP behind a router and firewall

From: David (davidwnh_at_adelphia.net)
Date: 10/29/03 

Date: Wed, 29 Oct 2003 07:01:53 GMT

You may have some problems using just port mode if most of your users
will be using browsers for transfers. Most browsers default to pasv mode
and many people will have problems on the client end of things with
their firewalls in regards to port mode. Passive makes things easier for
the clients however has additional security issues on the server end,
particularly if you are not dealing with a dedicated ftp server. Serving
up pages from a webserver may be a better solution. The transfers will
usually be slower, however it is generally more compatible with
firewalls on both ends and can be safer than using FTP. If you wish to
password protect resources you can use https and avoid having usernames
and passwords go unprotected over the wire. You can also run it on a
nonstandard port if you so desired with fewer problems.

>>
>>I would like to run an ftp server at home. I have a ADSL connection with a
>>router and an IPcop firewall. My ftp server will be running on a Windows
>>server.
>>
>>I don't want to have to use PASV transfers as my users will often be using
>>web browsers rather than actual ftp clients.
>>
>>How can I tell IPCop to correctly handle PORT ftp transfers to a LAN IP
>>address?
>>
>
>