From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mohamed Eldesoky Subject: Re: ftp connection tracking on multiple ports Date: Thu, 28 Oct 2004 12:40:30 +0200 Sender: netfilter-bounces@lists.netfilter.org Message-ID: <1403218a04102803406f55559a@mail.gmail.com> References: <1403218a0410280318a6ed55b@mail.gmail.com> <3063e5041028032133151758@mail.gmail.com> Reply-To: Mohamed Eldesoky Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <3063e5041028032133151758@mail.gmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: George Alexandru Dragoi , netfilter I do But it doesn't work when doing ftp host 45 then do ls it hangs there !! On Thu, 28 Oct 2004 13:21:45 +0300, George Alexandru Dragoi wrote: > Make sure you accept the packets in the RELATED and ESTABLISHED state. > > On Thu, 28 Oct 2004 12:18:24 +0200, Mohamed Eldesoky > > > wrote: > > Dear all, > > > > I have a server that runs FTP on two ports, port 21 and port 45 (for > > strange reasons) > > Now, i want conntrack to track the connections of both ports and their > > data ports !! > > > > I did that in my firewall script > > /sbin/modprobe ip_conntrack_ftp ports=21,45 > > $IPTABLES -A linweb_chain -p tcp -m multiport --destination-port > > 80,21,45 -j ACCEPT > > > > Is that all I need ?? > > > > -- > > Mohamed Eldesoky > > www.eldesoky.net > > RHCE > > > > > > > -- > Bla bla > > -- Mohamed Eldesoky www.eldesoky.net RHCE