From owner-freebsd-security Sat Apr 1 10:56:31 2000 Delivered-To: freebsd-security@freebsd.org Received: from ns.yogotech.com (ns.yogotech.com [206.127.79.126]) by hub.freebsd.org (Postfix) with ESMTP id 0CBC237B5C5 for ; Sat, 1 Apr 2000 10:56:27 -0800 (PST) (envelope-from nate@yogotech.com) Received: from nomad.yogotech.com (nomad.yogotech.com [206.127.79.115]) by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id LAA28053; Sat, 1 Apr 2000 11:56:22 -0700 (MST) (envelope-from nate@nomad.yogotech.com) Received: (from nate@localhost) by nomad.yogotech.com (8.8.8/8.8.8) id LAA04865; Sat, 1 Apr 2000 11:56:21 -0700 (MST) (envelope-from nate) Date: Sat, 1 Apr 2000 11:56:21 -0700 (MST) Message-Id: <200004011856.LAA04865@nomad.yogotech.com> From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: Andre Gironda Cc: Nate Williams , Jim Durham , freebsd-security@FreeBSD.ORG Subject: Re: FTP with firewall rules In-Reply-To: <20000401110144.A319@toaster.sun4c.net> References: <38E159DF.3D7E5DF6@w2xo.pgh.pa.us> <200004011825.LAA04705@nomad.yogotech.com> <20000401110144.A319@toaster.sun4c.net> X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid Reply-To: nate@yogotech.com (Nate Williams) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > export/setenv http_proxy! Huh? > of course, you have to find all of the distfiles manually, since only > about 4% of them have an http site to download the source from. That's irrelevant. You can still download *ALL* of them via passive-mode ftp. I have yet to find a site that didn't let me download with ftp in passive mode, so if you are *truly* interested in security, then you certainly don't want to open up so people can use active-mode ftp from behind your firewall. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message