passive ftp

[dragsternj]

Hi Folks

Does anyone knows why, if using any FTP connection i have to choose passive now, or it won't work?

and @ Wizzozz

Wenn das update "buggy" ist wie du sagst, warum ist es dann releast worden?

[muchod]

Post the FTP client rules you are using. Also post if something appears in your attack log and/or blocked log.

[WizzOzz]

Where did I say something like this?

[dragsternj]

FTP rules are the default rules. haven't change a thing.

@wizzozz
http://www.outpostfirewall.com/forum/showthread.php?s=&threadid=2509

Thanks

[muchod]

I think we must add this to the FAQ:

To setup a FTP client you need 3 rules:

When the protocol is TCP and direction is outbound and remote port is 21 allow it.

When the protocol is TCP and direction is inbound and remote port is 20 allow it.

When the protocol is TCP and direction is outbound and remote port is 1024-65535 and local port is 1024-65535 allow it.

This is assuming that ftp server uses port 21 (default).

The last rule is needed to passive (PASV) mode.

Post if it works for you....

[WizzOzz]

The latest BETA build, at the time I typed that message, was a big bug. You could crash Outpost any minute.
I thought youre using the beta? Am I wrong?
Yesterday a new beta build came out and Outpost is now working as it should.

[dragsternj]

I have NO idea what version i am using. RC1 something. Works as it should? Don't know. I am still not being asked if Outpost connects to Agnitum for the updates :)

[chrisclu]

Make a point of that Mikhail. Outpost should ask itself for permission:D

Hi dragsternj, I couldn't help it.:)
regards,
chris

[Mikhail]

When the protocol is TCP and direction is outbound and remote port is 1024-65535 and local port is 1024-65535 allow it.
This rule can make some of your port not stealthed. Do not ask me why - this is under investigation.

[WizzOzz]

Don't know. I am still not being asked if Outpost connects to Agnitum for the updates
Why should Outpost ask such a thing?
If you dont want updates, disable the automatic check and press the button. So its you initiating the process and you should know if you want it.
If you dont want DNS resolving turn it off.

Its like turning the key in a car and than saying that you did'nt give permisson to start the motor.

[dragsternj]

I have no problem with Outpost connecting to somewhere. But its still an outbound and should be allowed? I think i remember my previous FW from Norton did.

[WizzOzz]

But its still an outbound and should be allowed?
It is allowed in the settings. Disable the settings and there is no outbound.

[dragsternj]

No offense, but i understood that the first time.

[RobClark]

Will this be fixed in a later release? I to have to use passive mode when using FTP... would be a shame if I have to unstealth some prots to use FTP in non-passive mode.

[Mikhail]

Will this be fixed in a later release? I to have to use passive mode when using FTP... would be a shame if I have to unstealth some prots to use FTP in non-passive mode.
Sure it will.

[dragsternj]

Not sure why it happened, but all of the sudden and without me changing something Outpost asked itself it it will allow itself to connect to the web. Aupdrun.exe. So where is that coming from now?

[WizzOzz]

Please create a new thread if you have new questions.

aupdrun is a seperate program which is only launched by Outpost, so Im not too surprised that Outpost can block it.
The question would be "why does Outpost suddenly lost the rules für aupdrun?"
And this I cant answer. :(