[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Patch for gss ftp client to work through stateful firewalls

To: "Markus Moeller" <markus_moeller@compuserve.com>
Subject: Re: Patch for gss ftp client to work through stateful firewalls
From: Love <lha@stacken.kth.se>
Date: Fri, 25 Apr 2003 23:13:23 +0200
Cc: <heimdal-discuss@sics.se>
In-Reply-To: <001701c30b6a$94a3d670$7b427ad5@home> ("Markus Moeller"'smessage of "Fri, 25 Apr 2003 21:38:07 +0100")
References: <021a01c30b5c$03388b80$eba27ad5@home><001701c30b6a$94a3d670$7b427ad5@home>
Sender: owner-heimdal-discuss@sics.se
User-Agent: Gnus/5.090008 (Oort Gnus v0.08) Emacs/21.2 (i386--netbsdelf)

"Markus Moeller" <markus_moeller@compuserve.com> writes:

> Sam,
>
> The only commands send in clear are the PORT and PASV command and their
> replies. This is a compromise to allow passing through a firewall.
> All other commands are protected as before.

Except that someone can insert new commands in the command stream now that
clear text commands are allowed.

If the client/server, not by sending on CCC, could send the relevant
commands both in MIC/CONF/ENC and in clear, that would/might please
proxies/firewalls.

Love

References:
- Patch for gss ftp client to work through stateful firewalls
  - From: "Markus Moeller" <markus_moeller@compuserve.com>
- Re: Patch for gss ftp client to work through stateful firewalls
  - From: "Markus Moeller" <markus_moeller@compuserve.com>

Prev by Date: Re: Patch for gss ftp client to work through stateful firewalls
Next by Date: Re: Patch for gss ftp client to work through stateful firewalls
Prev by thread: Re: Patch for gss ftp client to work through stateful firewalls
Next by thread: Re: Patch for gss ftp client to work through stateful firewalls
Index(es):
- Date
- Thread