Re: [Help] Hylafax and passive ports

On Wed, 21 Nov 2007 11:09:28 +1000
"Darryl Cording" <[email protected]> wrote:

> Hi,
> 
> I've been trying to get guarddog to work with passive ports generated
> from the Hylafax application. It works similar to the FTP protocol
> with a control and data stream.
> 
> The guarddog sits between the Hylafax client and the Hylafax server.
> The control connection is opened correctly from the client to the
> server (port 4559), but then the Hylafax server tells the client to
> open up the data stream on a random tcp port that guarddog diligently
> drops.
> 
> How can I get guarddog to trust the dynamic passive port without
> opening up the entire firewall to the DMZ zone?  I need guarddog to
> work the same as the FTP protocol but with the initial control port
> being 4559 rather than 20.
> 
> Can this be done with guarddog?

Yes

Port 20 must be used for mount FTP Protokol.

From my vsftpd.conf

#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES

#
# Listen on IPv4. xinet users must set NO or comment out
# otherwise it must be set YES#
listen=YES
listen_port=a higherPort, example 55200

#These put a port range on passive FTP incoming requests - very useful
if #you are configuring a firewall.
pasv_min_port=a higher Port, example 55210
pasv_max_port=a higher Port, example 55230

You need only 20 opened Ports for a passive FTP Connections.

For Hylafax, You must edit Yours config for this Client and give with
Guarddog these Ports.

Regards


-- 
MfG / With best Regards
Rusmir Duško
Registered Linux user: #130654 http://counter.li.org

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Guarddog-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/guarddog-user