PASV firewall configuration only at host level now?

To the Ipswitch web site

Ipswitch Forums
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



PASV firewall configuration only at host level now?Expand / Collapse
Author
Message
Posted 11/5/2007 1:04:23 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/11/2008 6:41:57 PM
Posts: 9, Visits: 17
In 5, you could set the firewall options at the "host" level (host != machine here; more like a site), and in 6 that would be equivalent to the listener correct? I cannot seem to find how to set the firewall options for PASV at the listener level. There is a setting but it seems to be at the machine level.

Here's an example:

Two listeners both servicing FTP over port 21. The first has an IP of 10.0.0.100 and the second has 10.0.0.200. Each is natted at the firewall to a different routable IP, say 193.0.0.100 and 193.0.0.200.

So for a PASV request, I'd need to send back the right external IP, and port range for the right listener.

The only work around I can think of would be to add more machines, and have one listener per machine.

  Post Attachments 
firewall_options.jpg (20 views, 55.91 KB)

Post #38286
Posted 11/5/2007 1:36:00 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/11/2008 6:41:57 PM
Posts: 9, Visits: 17
Delete this post so we don't confuse people. I'm just being dense. I was thinking there was a 1-1 relationship between a host and a physical machine in the new version. There's not.  
Post #38288
Posted 11/9/2007 10:40:40 AM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Administrators
Last Login: 2 days ago @ 9:30:13 AM
Posts: 117, Visits: 185
Hello Cycler,

you are correct, the architecture allows you to set up 1 to 1, 1 to many and many to 1 relationships between listeners and hosts.

overall, how is your evaluation proceeding?

bye for now,

Kevin R Gillis
Ipswitch, Inc.

Post #38433
Posted 11/20/2007 1:26:26 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/11/2008 6:41:57 PM
Posts: 9, Visits: 17
Fairly well. I am still curious for an answner to my post on using the CLIconfig rather than a host file for DNS for the SQL server.  http://forums.ipswitch.com/Topic37877-46-1.aspx
Post #38719
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: kevin r gillis

PermissionsExpand / Collapse

All times are GMT -5:00, Time now is 7:03am

Powered By InstantForum.NET v4.1.4 © 2008
Execution: 0.094. 11 queries. Compression Enabled.