Hello all,

I’m having trouble allowing internal computers to access remote FTP sites on the net. The new version of CUTE FTP can seem to connect ok. But Internet Explorer gives an error “Invalid PORT command”. And Bullet Proof FTP says it can’t open the socket.

Also, one other question. Below is a section from my script. I wrote most of my script from scratch but added this from another one that I found. I notice that it slows down my internet a little. Any ideas why?

# ICMP Control and Status Messages

# Log and drop initial ICMP fragments

iptables -A INPUT --fragment -p icmp -j LOG \

--log-prefix "Fragmented incoming ICMP: "

iptables -A INPUT --fragment -p icmp -j DROP

iptables -A OUTPUT --fragment -p icmp -j LOG \

--log-prefix "Fragmented outgoing ICMP: "

iptables -A OUTPUT --fragment -p icmp -j DROP

iptables -A FORWARD --fragment -p icmp -j LOG \

--log-prefix "Fragmented forwarded ICMP: "

iptables -A FORWARD --fragment -p icmp -j DROP

iptables -A INPUT -p icmp \

--icmp-type source-quench -d $NETIP -j ACCEPT

iptables -A OUTPUT -p icmp \

--icmp-type source-quench -j ACCEPT

iptables -A FORWARD -p icmp \

--icmp-type source-quench -j ACCEPT

iptables -A INPUT -p icmp \

--icmp-type parameter-problem -j ACCEPT

iptables -A OUTPUT -p icmp \

--icmp-type parameter-problem -j ACCEPT

iptables -A FORWARD -p icmp \

--icmp-type parameter-problem -j ACCEPT

iptables -A INPUT -p icmp \

--icmp-type destination-unreachable -j ACCEPT

iptables -A OUTPUT -p icmp \

--icmp-type fragmentation-needed -j ACCEPT

iptables -A FORWARD -p icmp \

--icmp-type fragmentation-needed -j ACCEPT

# Don¹t log dropped outgoing ICMP error messages

iptables -A OUTPUT -p icmp \

--icmp-type destination-unreachable -j DROP

iptables -A FORWARD -o $NETFACE -p icmp \

--icmp-type destination-unreachable -j DROP

thanks for any help.

Mark.