OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: ftpd: the advisory version
From: Carson Gaspar (carsonTLA.ORG)
Date: Fri Jun 30 2000 - 19:05:20 CDT

>>>>> "Mike" == Mike Eldridge <dizCAFES.NET> writes:

Mike> On Tue, 27 Jun 2000, Olaf Kirch wrote:
>> I.e. publicfile is able to drop root privs because it stops using port 20
>> when creating data connections in response to a PORT command. It's
>> against the spec but works with most clients.

Mike> Against spec, it may be, but in my opinion, it makes more sense.

FYI, it violates a SHOULD, it doesn't violate a MUST, so it is officially in
spec. 

--
Carson Gaspar -- carsontla.org
Queen Trapped in a Butch Body