[FW1] ftp server using random high ports

["Ivan Fox" <ifox100@FW1-NOSPAMhotmail.com>]

some users need to access an external ftp server.  they can access to the
server using regular port 20, 21.  However, when they try to "ls" or "dir",
nothing comes up.  Firewall-1 log shows that the ftp server coming back
using random high ports!

Is it typical/common for ftp's returning traffic using random high ports
instead of port 21?
Is there any implication to allow the ftp server coming back through random
high ports?

Any comments/input are appreciated.

Ivan



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================