The NAS firewall policy change to block non-registered ports into the NAS network has been postponed for one week in order to ensure users have sufficient time to verify that the new port range is allowed through their sites' firewalls. The change will be implemented on March 5 at 1:00 p.m. (Pacific Time).

The registered port range for bbFTP is 50000 - 51000 and will remain open. There will continue to be no restriction on outbound transfers. You can test whether the new port range works with your firewall by specifying the range for bbFTP, using one of the following methods:

• bbftp -s -u remote_username -D50000:51000 -e 'setnbstream 8; put file_name' -E 'bbftpd -s -m8' remotehost
• bbftp -u username -e ' put file_name' -E 'bbftpd -s -e 50000:51000' hostname

By default, the Secure Unattended Proxy (SUP) already uses the correct port range (50000 - 51000) unless it is overwritten manually.  For testing purposes, the Pleiades Front-End systems (PFEs) have a staged binary that sets the correct range in /usr/local/bin/bbftpd-new.

If you have any questions, please contact the Control Room at (800) 331-8737, (650) 604-4444, or support@nas.nasa.gov.