firewall question

[Bill Tangren]

Jessica Zhu wrote:
> Hi,
> 
> I set up the firewall on an old linux(7.1) server using ipchains which 
> allows ftp within our network. After the firewall up, some users in the 
> office who using Bbedit on Macintosh complained that they cannot ftp to 
> the server any more although there is no problem to use other ftp 
> programs.  
> 
> My final solution is to trust the ips from those users using BBedit and 
> accept all from them. However, I thought this is not the best and secure 
> solution. Just wondering whether anybody on the list can help me figure 
> out the better solution.
> 
> Thanks!
> 
> Jessica 
> 

I think your problem is that they are (or are not, I don't remember 
which right now) using passive mode for ftp by default. They need to 
switch whichever they are using. That should solve the problem.

Bill