From: "HakRz1" <HakRz1@punkass.com>
To: <netfilter-devel@lists.netfilter.org>
Subject: ip_conntrack_ftp.c kernel source more ports
Date: Mon, 19 Jan 2004 23:38:08 -0800 [thread overview]
Message-ID: <001101c3df28$5a342ac0$0100a8c0@hak> (raw)
Hello,
im trying to make a big security flaw in my network but i want to try
anyways ...what im trying to do is make ip_conntrack_ftp monitor all non
standard ports instead of defualt 21
i know ip_conntrack_ftp.h is where it gets port 21 defined
is there anyway to make it monitor all FTP ports without typing in all ports
manually
i know alot of you dont like this idea but the way i figure it is to get
Active FTP to work on non standard ports ( or even using pasv) you cant
close the firewall can only close ports 1-1080 for pasv to work
if i can get this module to work with all ports then i can enable
established and related connections only...sounds secure to me more so than
before with ports 1-1080 :)
Hope somone can help me with this
also i already know about modprobe ip_conntrack_ftp ports=...etc but this is
a hassle to do
im running kernel 2.6.0 / iptables v1.2.8 / slackware 9.1
Thanks
next reply other threads:[~2004-01-20 7:38 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-01-20 7:38 HakRz1 [this message]
2004-01-21 14:19 ` ip_conntrack_ftp.c kernel source more ports Harald Welte
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='001101c3df28$5a342ac0$0100a8c0@hak' \
--to=hakrz1@punkass.com \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.