um, why bother running the firewall then? This is also the same an -P input
ACCEPT... your allowing anyone to connect from their port 20 (easy enough
to spoof) to your box on any port above 1023... not a great idea. Someone
using NMap could scan all your upper ports easily.
Is it that hard to type PASSIVE?
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu