From owner-freebsd-security@FreeBSD.ORG Fri Sep 19 06:07:32 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6B39716A4B3 for ; Fri, 19 Sep 2003 06:07:32 -0700 (PDT) Received: from amsfep12-int.chello.nl (amsfep12-int.chello.nl [213.46.243.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0B84643FBD for ; Fri, 19 Sep 2003 06:07:31 -0700 (PDT) (envelope-from dodell@sitetronics.com) Received: from sitetronics.com ([213.46.142.207]) by amsfep12-int.chello.nl ESMTP <20030919130729.CXTD22036.amsfep12-int.chello.nl@sitetronics.com>; Fri, 19 Sep 2003 15:07:29 +0200 Message-ID: <3F6AFF42.2010403@sitetronics.com> Date: Fri, 19 Sep 2003 15:06:10 +0200 From: "Devon H. O'Dell" User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4) Gecko/20030820 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Vlad Galu References: <20030917084415.85385.qmail@web41808.mail.yahoo.com> <3F6820D9.9040702@sitetronics.com> <20030919125510.0BD5443FD7@mx1.FreeBSD.org> In-Reply-To: <20030919125510.0BD5443FD7@mx1.FreeBSD.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-security@freebsd.org Subject: Re: ftp X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Sep 2003 13:07:32 -0000 Vlad Galu wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >On Wed, 17 Sep 2003 10:52:41 +0200 "Devon H. O'Dell" >wrote: > > > >>With the default FreeBSD FTP daemon, you can already control the ports used. >> >>Simply change net.inet.ip.portrange.hifirst and >>net.inet.ip.portrange.hilast, which default to the following values: >>net.inet.ip.portrange.hifirst: 49152 >>net.inet.ip.portrange.hilast: 65535 >> >> >> > I haven't examined the bsdftpd source, does it read the sysctl settings and >behave accordingly ? > > Yes, this was my implication here. You can change these MIBs and restart the ftpd. More information is in the manpages on the subject ;) --Devon