From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Mark Feijo" Subject: can't access FTPs Date: Mon, 20 May 2002 16:31:00 -0400 Sender: netfilter-admin@lists.samba.org Message-ID: <000001c2003d$41588300$0a00a8c0@feijo.local> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C2001B.BA46E300" Return-path: Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.samba.org This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C2001B.BA46E300 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello all, =20 I=92m having trouble allowing internal computers to access remote FTP sites on the net. The new version of CUTE FTP can seem to connect ok. But Internet Explorer gives an error =93Invalid PORT command=94. And = Bullet Proof FTP says it can=92t open the socket. =20 =20 Also, one other question. Below is a section from my script. I wrote most of my script from scratch but added this from another one that I found. I notice that it slows down my internet a little. Any ideas why? =20 # ICMP Control and Status Messages =20 # Log and drop initial ICMP fragments iptables -A INPUT --fragment -p icmp -j LOG \ --log-prefix "Fragmented incoming ICMP: " iptables -A INPUT --fragment -p icmp -j DROP =20 iptables -A OUTPUT --fragment -p icmp -j LOG \ --log-prefix "Fragmented outgoing ICMP: " iptables -A OUTPUT --fragment -p icmp -j DROP =20 iptables -A FORWARD --fragment -p icmp -j LOG \ --log-prefix "Fragmented forwarded ICMP: " iptables -A FORWARD --fragment -p icmp -j DROP =20 iptables -A INPUT -p icmp \ --icmp-type source-quench -d $NETIP -j ACCEPT =20 iptables -A OUTPUT -p icmp \ --icmp-type source-quench -j ACCEPT =20 iptables -A FORWARD -p icmp \ --icmp-type source-quench -j ACCEPT =20 iptables -A INPUT -p icmp \ --icmp-type parameter-problem -j ACCEPT =20 iptables -A OUTPUT -p icmp \ --icmp-type parameter-problem -j ACCEPT =20 iptables -A FORWARD -p icmp \ --icmp-type parameter-problem -j ACCEPT =20 iptables -A INPUT -p icmp \ --icmp-type destination-unreachable -j ACCEPT =20 iptables -A OUTPUT -p icmp \ --icmp-type fragmentation-needed -j ACCEPT =20 iptables -A FORWARD -p icmp \ --icmp-type fragmentation-needed -j ACCEPT =20 # Don=B9t log dropped outgoing ICMP error messages iptables -A OUTPUT -p icmp \ --icmp-type destination-unreachable -j DROP =20 iptables -A FORWARD -o $NETFACE -p icmp \ --icmp-type destination-unreachable -j DROP =20 =20 thanks for any help. =20 =20 Mark. ------=_NextPart_000_0001_01C2001B.BA46E300 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello all,

 

I’m having trouble allowing internal computers = to access remote FTP sites on the net.=A0=A0 The new version of CUTE FTP can seem to connect ok.=A0 But Internet Explorer gives an error = “Invalid = PORT command”.=A0 And Bullet Proof FTP says it = can’t open the socket.

 

 

Also, one other = question.=A0 Below is a section from my script. = =A0I wrote most of my script from = scratch but added this from another one that I found.=A0 I notice that it slows down my internet a little.=A0 Any ideas = why?

 

# ICMP Control and Status = Messages

 

# Log and drop initial ICMP = fragments

iptables -A INPUT --fragment -p icmp -j LOG = \

=A0=A0=A0=A0=A0=A0=A0=A0 --log-prefix "Fragmented incoming ICMP: = "

iptables -A INPUT --fragment -p icmp -j = DROP

 

iptables -A OUTPUT --fragment -p icmp -j LOG = \

=A0=A0=A0=A0=A0=A0=A0=A0 --log-prefix "Fragmented outgoing ICMP: = "

iptables -A OUTPUT --fragment -p icmp -j = DROP

 

iptables -A FORWARD --fragment -p icmp -j LOG = \

=A0=A0=A0=A0=A0=A0=A0=A0 --log-prefix "Fragmented forwarded ICMP: = "

iptables -A FORWARD --fragment -p icmp -j = DROP

 

iptables -A INPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type source-quench -d $NETIP -j = ACCEPT

 

iptables -A OUTPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type source-quench -j = ACCEPT

 

iptables -A FORWARD -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type source-quench -j = ACCEPT

 

iptables -A INPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type parameter-problem -j = ACCEPT

 

iptables -A OUTPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type parameter-problem -j = ACCEPT

 

iptables -A FORWARD -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type parameter-problem -j = ACCEPT

 

iptables -A INPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type destination-unreachable -j = ACCEPT

 

iptables -A OUTPUT -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type fragmentation-needed -j = ACCEPT

 

iptables -A FORWARD -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type fragmentation-needed -j = ACCEPT

 

# Don=B9t log dropped outgoing ICMP error = messages

iptables -A OUTPUT=A0 -p icmp \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type destination-unreachable -j = DROP

 

iptables -A FORWARD -o $NETFACE -p icmp = \

=A0=A0=A0=A0=A0=A0=A0=A0 --icmp-type destination-unreachable -j = DROP

 

 

thanks<= font size=3D2 face=3DArial> for any help.

 

 

Mark.

------=_NextPart_000_0001_01C2001B.BA46E300--