Why doesn my browsers ftp work for me when i can access ok from other ftp clients and the command line just fine?
This is due to the browser using PASV (passive mode) which requires access on the firewall in the range of 1024 and 5000. Your three options are one to use allow emphemeral inbound connections from these ports and call it a day. The second option is to use a standard ftp client that uses predictable ports and proxy it using fwtk’s ftp-gw proxy to isolate it better. Then have the ftp proxy call the ftp server on behalf of your client rather than direct access per se. Your third option and the best probably the ringer is to blend both one and two. IOW allow inbound connections to emphemeral ports used by PASV and proxy those connections using fwtk as your final layer inbound into the ftp server. You will sleep nights better this way if you really need to allow ftp server access. At the time of this writing if you are using Exploder rather than Netscape then securing your firewalls is the least of your problems…
