Problem with passiv FTP

["Christian Gmeiner" <christian@visual-page.de>]

[-- Attachment #1: Type: text/plain, Size: 1202 bytes --]

Hi people.

I got active FTP working, but i also need the passive one.

Here is my stuff:

    # Port 21

    iptables -A INPUT     -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT 
    iptables -A OUTPUT -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT 

    # aktiv - works
    iptables -A INPUT     -p tcp --sport 20 -m state --state ESTABLISHED,RELATED -j ACCEPT 
    iptables -A OUTPUT -p tcp --dport 20 -m state --state ESTABLISHED -j ACCEPT 

    # passiv
    iptables -A INPUT     -p tcp --sport ${UNPRIVPORTS} --dport ${UNPRIVPORTS}  -m state --state ESTABLISHED -j ACCEPT 
    iptables -A OUTPUT -p tcp --sport ${UNPRIVPORTS} --dport ${UNPRIVPORTS}  -m state --state ESTABLISHED,RELATED -j ACCEPT 

I have everything set to drop and i am alowing this protocols and ports:

# TCP in+out
#
#
TCP_IN_OUT="ssh"

# TCP out
#
# 5190 = ICQ
#
TCP_OUT="5190 http https 25 ftp ftp-data pop3 smtp"

# TCP in
#
TCP_IN=""

# UDP in+out
#
UDP_IN_OUT="domain ssh"

# UDP out
#
#
UDP_OUT="https"

# UDP in
#
UDP_IN=""

UNPRIVPORTS="1024:65535"

So.. i must now allow the UNPRIVPORTS, but how i am doing this?

Thanks, Christian Gmeiner

[-- Attachment #2: Type: text/html, Size: 3147 bytes --]