To protect random ftp port

To protect random ftp port

[Albert Wan]

[-- Attachment #1: Type: text/plain, Size: 1083 bytes --]

Dear Sir,

I would like to post this message to the list to see if any suggestion to my problem.

I have install a Linux web server with https service putting to Internet with external address.  The traffic coming from our web application to the web server through web page which is access from outside. The other way of traffic coming from our internet LAN network using ftp upload and downlad files to the web server. Our web application is designed with ramdom port for ftp access. That is no fix port number defined. The port 80 and 443 are always open when start up the web server.

My question is do I have to open all ports using the following commands in order to tailor for my ftp ramdom port access? Is there any alternative way to set up?
$ iptables -A INPUT -p tcp -i eth0 -s 0/0 -d 0/0 --dport 0:65535 -j ACCEPT
$ iptables -A INPUT -p udp -i eth0 -s 0/0 -d 0/0 --dport 0:65535 -j ACCEPT

When I set up these commands in the web server, it seems block all the traffic from outside browser. What is your suggestion?

Looking for your kind replay.

Albert


[-- Attachment #2: Type: text/html, Size: 1781 bytes --]