FTP / ZA pro

[MRB]

Ok now since I can FTP with my provider with ZA pro disable.
I want FTP w/ZA pro active. But when I do, I get "firewall block internet acess to your pc tcp.port 1028 from 24.xxx.x.xx"
My settings ZA are followind:
Program tab: Ftf program with check allow connect local & internet and allow serve local & internet.
On security setting advance tab local zone contents tab do I have to enter my ISP on Network or other computers? or am I'm totaly wrong the way I'm doing?

Help will be great thanks

MRB

[ghost]

Add the FTP server's IP to your LOCAL ZONE, and ZA will allow communications.

[cyberskye]

Ghost is right. Setting the ftp server to 'local zone' will allow ftp access. I would be sure to move the ftp server to local only when needed then back to 'internet'. ftp is VERY insecure and ftp servers are obvious targets for launching distributed attacks.

The server you are connecting to uses 'active mode' ftp. You send a connection request on the data channel (port 21) and then the client (your machine) picks an unused port greater than 1024 for data transfer and sends that back to the server via the data channel and listens at that port for the server to connect. If your ports are stealthed that connection will be dropped.

A rules-based firwewall would make this fairly easy to configure and still be a little more secure, but If I shelled out cash for ZAP I wouldn't want to end up using a different fw...either way, you want to keep tight control on ftp access to and from your machine.

Hope this helps.

Have fun,

Skye

[MRB]

Thanks for the responce.
I can get thru ZA.
1. FTP program settings configuration is Passive or PASV.
2. ZA PRO settings:
a). Program tab FTP are allow access to all ports and protocols
b). Security tab >advance>add>host/site> I enter host name
did not work.
Next I try 2. b). as my site HTTP://.... I get following message from ZA " could not find (http://....) in DNS or WIN lookup.

I'm going nuts:cry:

I dont want eliminate ZA from my system but I really need the FTP

Any help will be apreciated

MRB
:confused: