Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I installed Agnitum Outpost firewall which tells me about every connection happening on every port. When I try to connect to my FTP server on port 21 (hosted on mediatemple.com), I get an outgoing request firewall alert to ekiaiokqii.c08.mtscv.net on port 54675. The name has nothing to do with my domain name or Media Temple.

Is this normal?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

What you see is normal for both FTP protocol and your hosting. FTP protocol uses 2 sets of ports. One set of ports is for "control connection"(in your case port 21) and another set of ports for "data connection". Control connection port is used for sending commands to an FTP server and getting status replies back. The actual file transfer and directory listing is being transmitted over data connection ports. This is what those PORT and PASV commands you see your ftp client use. Based on the information you provided, you sounds like your ftp entry is configured with PASV mode. When FlashFXP sent that command to your server, it replied back asking to connect to its port 54675. These numbers will (almost) always be between 1024 and 65565.


As for the hostname, you originally connected to your server using your domain name. Your firewall knows nothing about that domain, it just sees a connection attempt to an IP address. To present that information in a more readable format, your firewall tried to convert that IP into a hostname and it got that ekiaiokqii.c08.mtscv.net entry. What that means is there's a dns mismatch between going from hostname to an IP address and going from IP address to a hostname. This is not necessarily wrong/bad. It all depends on your hosting plan and the way your hosting provider configures its network.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.