All of lore.kernel.org
 help / color / mirror / Atom feed
From: "HakRz1" <HakRz1@punkass.com>
To: <netfilter-devel@lists.netfilter.org>
Subject: ip_conntrack_ftp.c kernel source more ports
Date: Mon, 19 Jan 2004 23:38:08 -0800	[thread overview]
Message-ID: <001101c3df28$5a342ac0$0100a8c0@hak> (raw)

Hello,
    im trying to make a big security flaw in my network but i want to try
anyways ...what im trying to do is make ip_conntrack_ftp monitor all non
standard ports instead of defualt 21
 i know ip_conntrack_ftp.h is where it gets port 21 defined
is there anyway to make it monitor all FTP ports without typing in all ports
manually

i know alot of you dont like this idea but the way i figure it is to get
Active FTP to work on non standard ports ( or even using pasv) you cant
close the firewall can only close ports 1-1080 for pasv to work
if i can get this module to work with all ports then i can enable
established and related  connections only...sounds secure to me more so than
before with ports 1-1080 :)

Hope somone can help me with this

also i already know about modprobe ip_conntrack_ftp ports=...etc but this is
a hassle to do

im running kernel 2.6.0 / iptables v1.2.8 / slackware 9.1

Thanks

             reply	other threads:[~2004-01-20  7:38 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-01-20  7:38 HakRz1 [this message]
2004-01-21 14:19 ` ip_conntrack_ftp.c kernel source more ports Harald Welte

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='001101c3df28$5a342ac0$0100a8c0@hak' \
    --to=hakrz1@punkass.com \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.