mina-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Firstenberg (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (FTPSERVER-420) When picking a passive port, use "random port" from the pool instead of "lowest port"
Date Thu, 16 Jun 2011 18:58:47 GMT

     [ https://issues.apache.org/jira/browse/FTPSERVER-420?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Allen Firstenberg updated FTPSERVER-420:
----------------------------------------

    Attachment: DataConnectionConfigurationFactory.java.diff
                PassivePorts.java.diff

Attached two files that change PassivePorts.java to use a random port, roughly using the algorithm
proposed in the email discussion.  Minor change to DataConnectionConfigurationFactory to create
its default instance of PassivePorts.

> When picking a passive port, use "random port" from the pool instead of "lowest port"
> -------------------------------------------------------------------------------------
>
>                 Key: FTPSERVER-420
>                 URL: https://issues.apache.org/jira/browse/FTPSERVER-420
>             Project: FtpServer
>          Issue Type: Improvement
>          Components: Core
>            Reporter: Allen Firstenberg
>         Attachments: DataConnectionConfigurationFactory.java.diff, PassivePorts.java.diff
>
>
> As discussed on the mailing list <http://www.mail-archive.com/ftpserver-users@mina.apache.org/msg01635.html>,
passive ports are allocated from the pool based on the lowest available port from the list.
 This may cause problems with some firewalls or clients that may not release the port as quickly
as the server expects.  It is also a minor security risk to provide an easily guessable port
for passive connections.
> Discussion on the list centered around other options to allocate ports, focusing on a
random port assignment from the available pool.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message