access-list and ftp

[joeka77]

Hello,
i want to allow ftp-access to an outside FTP-Server. I want to allow 21 with the rule:
access-list 100 permit tcp host Client-IP host Server-IP eq 21
(outbound)
Have I to allow 20 as well, or ist the tcp-established-rule sufficient?? Thanks for Info!

 

[fmonteiro]

If the FTP server is in the outside, let's say, somewhere in the Internet, you do not need to add any additional access-list. As the FTP protocol uses TCP, the established rule should be enough.