> This kind of depends on what iptables or firewall rules you have,
> but for a moment lets assume that you allow "related" connections on your input.
>
> What this means is to allow anything you connect outbound to to be
> trusted to make a reverse connection back to you.
>
> So you are therefore trusting everything you connect to. Doesn't
> sound very "Secure" to me.
>
That's not what related means...
Related refers to the returning flow for a given session (sequence numbers need to match etc) or in the case of ftp with the appropriate ftp conntrack module then the data channel related to the control channel TCP session currently open not that the destination can then connect willy nilly back to the source...
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
