Security 7-29
FTP sessions. To allow WAN-originated FTP sessions to a LAN-based
FTP server with the IP address a.b.c.d (corresponding to a numbered
IP address such as 163.176.8.243), insert the following input filter
ahead of the current input filter 1:
■ Enabled: Yes
■ Forward: Yes
■ Source IP Address: 0.0.0.0
■ Source IP Address Mask: 0.0.0.0
■ Dest. IP Address: a.b.c.d
■ Dest. IP Address Mask: 255.255.255.255
■ Protocol Type: TCP
■ Source Port Comparison: No Compare
■ Source Port ID: 0
■ Dest. Port Comparison: Equal
■ Dest. Port ID: 21
Note: A similar filter could be used to permit Telnet or WWW access.
Set the Dest. Port ID to 23 for Telnet or 80 for WWW.