Re: [jim@cyberjunkees.com: Re: FW: Worm probes]

"Chris Hellberg" wrote:

With the more active (excuse the pun) NAT devices out there, they can watch for PORT commands in the packet stream and open up the port incoming from the server back to the client.

Actually, how to watch for the FTP PORT command is part of the original NAT RFC, 1631. Any NAT implementation that doesn't (at least as an option) is beneath contempt. And while PORT commands are generally handled correctly, PASV responses often aren't, so an FTP server behind a NAT may require clients to use active FTP. Another reason why FTP *must* *die*. <snarl> -- don --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog