Passive ftp local/return port assignment?

[Ron Van Cleave]

Hello,

Would anyone know if it is possible to restrict the
return port assignment for the ftpd service.

We would like to configure the ftpd service to assign
or allocate local/return ports to a specific range.

Not sure if this can be configured with ndd or not?

An example would be a passive ftp connection that uses the
remote port 21 and assigns a random high-end port for the
return port. Is it possible to control or limit the range
of the return ports?

In the example below we are trying to control the: 50158
port assignment?
Server responding:
tcp 0 0 15.19.50.73.21 15.19.50.183.50158 ESTABLISHED
Client connecting
tcp 0 0 15.19.50.183.50158 15.19.50.73.21 ESTABLISHED

Ron.

[rick jones]

I'm not sure there is a way with FTP configuration, but the 11.0 ftpd is a wu-ftpd, so checking the docs on that might find something.

You could in theory manipulate tcp_smallest_anon_port and tcp_largest_anon_port to restrict the anonymous port assignements to a specific range. That however will affect _all_ TCP connections using anonymous ports, not just FTP.

[Ron Van Cleave]

Some information has been identified:

This feature is new on version 2.6.1 of
wu-ftpd. Our new version of ftpd will be
based on this version, however it is not
available at this time. Our current version
of wu-ftpd is based on 2.4.

I've sent a message to the developers to see
when it will be available. I know it will not be supported on 10.20 for sure, but I'm not
sure about 11i/11.0. As soon as I hear I'll
get back to you.

Cheers,
Doug Lamoureux