[Lancaster] firewall update

[Ken Hough]

On Thursday 26 November 2009 10:56:56 Wayne Ward wrote:
> Hi ken its just a update on the smoothwall firewall
> Ive been setting up sorry if I wasnt clear.
>
> Did you get your vsftp server up and running ok?

Sort of !

I'm presently setting up an ATHLON XP2200+ box with 32 bit Debian Lenny as a 
server box and for now I've opted to use plain old 'ftp' which is working 
fine. I've also got apache and a basic SAMBA config working.

Don't laugh guys, but I'm seriously considering whether to change from using 
SUSE to Debian. This is because the latest version of SUSE (v11.2) provides 
only KDE4  which I do not like. v3.5.10 is no longer included. Also, I've 
experienced a number of wobblies with SUSE v11.2.

I have to admit that online Debian documentation is pretty good  --  now that 
I've found it, and this does pretty well describe how to hack config files to 
suit particular requirements.

I've got both Gnome and KDE v3.5.10 installed without any problems.

I'm about to use a spare hard drive to install 64 bit Lenny on my main desktop 
PC to try as my main system. Wish me luck!

Ken Hough

>
> Regards
> Wayne
>
> On Thu, 26 Nov 2009 10:53:19 +0000, Ken Hough <kenhough at btinternet.com>
>
> wrote:
> > On Wednesday 25 November 2009 17:33:49 Wayne Ward wrote:
> >> Looks like I got a fix for the FTP on custom ports on the firewall !
> >> look here
>
> http://community.smoothwall.org/forum/viewtopic.php?f=20&t=33332&p=265381#p
>
> >>265381 Its not often you see ftp on custom ports but looks like a quick
> >>fix
> >> im just going to test now...
> >>
> >> I had a small problem today - the client was running a program that was
> >> doing a who is lookup
> >> So just added allow on port 43 on the firewall and that was fixed
> >> So far the smoothie is cutting it good style !!
> >
> > Hi Wayne!
> >
> > Is this refering to my query a while back?
> >
> > The messages refered to at the link given above mention the use of port
> > 210.
> >
> > My query concerned vsftp and it's use of ports in the upper thousands
> > range.
> > Since then I've seen a fsftpd.conf file which does refer to this and
> > actually
> > tells vsftp to restrict use of these ports as follows:
> >
> > "
> > # Limit passive ports to this range to assis firewalling
> > pasv_min_port=30000
> > pasv_max_port=30100
> > "
> >
> > Ken Hough
> >
> > _______________________________________________
> > Lancaster mailing list
> > Lancaster at mailman.lug.org.uk
> > https://mailman.lug.org.uk/mailman/listinfo/lancaster