From owner-freebsd-questions  Fri Sep  6  7:54:29 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3D61A37B400
	for <questions@freebsd.org>; Fri,  6 Sep 2002 07:54:28 -0700 (PDT)
Received: from blacklamb.mykitchentable.net (207-173-227-236.bras01.elk.ca.frontiernet.net [207.173.227.236])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 729FC43E6A
	for <questions@freebsd.org>; Fri,  6 Sep 2002 07:54:27 -0700 (PDT)
	(envelope-from drew@mykitchentable.net)
Received: from TAGALONG (unknown [165.107.42.110])
	by blacklamb.mykitchentable.net (Postfix) with SMTP id 2630CEE5DB
	for <questions@freebsd.org>; Fri,  6 Sep 2002 07:54:26 -0700 (PDT)
Message-ID: <002901c255b5$4b7cb220$6e2a6ba5@TAGALONG>
From: "Drew Tomlinson" <drew@mykitchentable.net>
To: "FreeBSD Questions" <questions@freebsd.org>
Subject: How To Set Passive FTP Port Range?
Date: Fri, 6 Sep 2002 07:54:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I'm using the ftp daemon that ships with FBSD.  From the man page, I
see that it uses ports 49152-65535 by default for passive ftp.  So to
allow passive ftp, I have open this port range on my firewall.

I suspect there is a way to further limit this port range.  My
questions are:

1. Can I further limit the port range?

2. Is there any significant security advantage by doing so?

3. Are there any disadvantages from limiting the port range further?

My particular system is just a small home system and will only have a
very small number (like 10 or less) of ftp users at any given time.

Any insight or links to appropriate documents appreciated.

Thanks,

Drew


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message