Hello, Hugo Mildenberger a écrit :
should the ftp-conntrack helper expose arbitrary ports on the originating host?
Yes it should, for the following two reasons : 1) The host explicitly asked for it over the FTP control connection.2) The firewall administrator allowed it by loading the FTP conntrack module.
