Martijn Lievaart a écrit :
should the ftp-conntrack helper expose arbitrary ports on the originating host?Yes it should, for the following two reasons : 1) The host explicitly asked for it over the FTP control connection.2) The firewall administrator allowed it by loading the FTP conntrack module.No, not arbitrary ports. The port asked for in the port command should be opened (and it is).
I took "arbitrary" as "arbitrarily chosen by the host".
