access list for ftp

Discussion in 'Cisco' started by Ramon Barquier, Jan 22, 2004.

  1. Hi,

    we have an access-list in our router for permit the ftp traffic only for
    certains destinations ip. The rules are:

    access-list 102 permit tcp any host aaa.bbb.ccc.ddd eq 21
    access-list 102 permit tcp any eq ftp-data host aaa.bbb.ccc.ddd gt 1023

    This work fine with ftp commands but not when attempt to make a browser
    connection to the ftp server.

    Any suggestion on how i would make this rule?


    --
    Ramón Barquier Montalbán
    Servei d'Informàtica

    Edifici D
    Campus de la UAB
    08193 Bellaterra. Barcelona
    Tel. +34 935 811 488 Fax: +34 935 812 094

    www.uab.es/si
     
    Ramon Barquier, Jan 22, 2004
    #1
    1. Advertising

  2. In article <buor2a$j5l$>,
    Ramon Barquier <> wrote:
    :we have an access-list in our router for permit the ftp traffic only for
    :certains destinations ip. The rules are:

    :access-list 102 permit tcp any host aaa.bbb.ccc.ddd eq 21
    :access-list 102 permit tcp any eq ftp-data host aaa.bbb.ccc.ddd gt 1023

    :This work fine with ftp commands but not when attempt to make a browser
    :connection to the ftp server.

    Speculating here:

    - the browsers might be attempting to contact the remote host on port 20
    (ftp-data)

    - the browsers might be using passive ftp from a port other than
    port ftp-data .

    At the end of your list, put in

    access-list 102 deny ip any any log-input

    and monitor your logs to see what is being attempted.
    --
    Preposterous!! Where would all the calculators go?!
     
    Walter Roberson, Jan 22, 2004
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Joe Bloe
    Replies:
    2
    Views:
    2,724
    jankemi(remove)
    Jul 24, 2003
  2. Peter
    Replies:
    0
    Views:
    428
    Peter
    Dec 1, 2003
  3. PS2 gamer
    Replies:
    6
    Views:
    7,003
    Hansang Bae
    Jun 9, 2004
  4. Mike Easter

    Why can't I access ftp://ftp.isc.org/ ?

    Mike Easter, Mar 14, 2007, in forum: Computer Support
    Replies:
    10
    Views:
    920
    Vanguard
    Mar 15, 2007
  5. Giuen
    Replies:
    0
    Views:
    1,159
    Giuen
    Sep 12, 2008
Loading...

Share This Page