From mboxrd@z Thu Jan  1 00:00:00 1970
From: raptor <raptor@tvskat.net>
Date: Mon, 10 May 2004 19:45:30 +0000
Subject: [LARTC] ip_conntrack_ftp
Message-Id: <20040511012222.6c12892f@vr>
List-Id: <lartc.vger.kernel.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

As read here :
http://www.sns.ias.edu/~jns/security/iptables/iptables_conntrack.html

modprobe ip_conntrack_ftp
would give me the ability to use active ftp if I have (pseudo/simplified code)

iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -j DROP

but I cant use active ftp, WHAT IS WRONG..  eth0 is the internal interface..

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/