On Tue, 30 Oct 2001, Frederico.S.Muñoz wrote: > AFAIK either the HTTP, the FTP, or both; it depends on what you define in > your sources.line. > > If you only define http sites you would only need the http port open, the > same with the ftp.
2 things: 1) If you're blocking connections anal retentively, non-passive FTP may break anyway. 2) Why are you blocking *outgoing* connections, anyway? If you don't trust people inside your network to make an outbound connection, do they really need to be on the network at all? -- Baloo