During authetication, ther server now uses the source port of the client as the command port if it is valid and provides a random valid port if it is not.