cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: FTP_IGNORE_PASSIV_IP [Virus Checked]

From: Daniel Stenberg <daniel-curl_at_haxx.se>
Date: Thu, 23 Sep 2004 10:08:16 +0200 (CEST)

On Wed, 22 Sep 2004, Dan Fandrich wrote:

> Even if this solution were to be used, the NAT firewall will not know which
> TCP port to map to the internal host because it can't see the PASV response.
> The remote client will attempt to connect to the control channel address,
> but the port will be closed. How is the NAT firewall supposed to get this
> information?

It works only if the NAT firewall is naively converting the IP addresses of
the traffic that goes through, without caring much for which ports that are
involved.

Since Ed's patch works for him, his firewall must do something like that.

On my end, I'm thinking: Is this a feature more people than Ed will ever find
use for? Should we add this to libcurl?

-- 
      Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se
       Dedicated custom curl help for hire: http://haxx.se/curl.html
Received on 2004-09-23