From: "Denis" <rinakkusu@pincushion.de>
To: netfilter@lists.netfilter.org
Subject: iptables and pasv ftp
Date: Fri, 17 Jan 2003 23:23:58 +0100 [thread overview]
Message-ID: <004201c2be77$21efbb20$fe00a8c0@SG1> (raw)
Hi
I'm new to iptable-firewalling and hope someone is able to give some advice.
I'm using redhat 8.0 with
proftpd as ftp server and iptables as firewall. I wrote a rule in iptables
to open port
21. So connecting to my ftp server via active mode works just fine. But if a
client which itself lies behind a firewall tries to use pasv mode, the
connection doesn't work.
I guess I need to put in a new iptable rule or something, because if I
shutdown iptables pasv also works. I read that I need to open port 20 and
some ports like 64500:65535, and that I need to use ip_conntrack and
ip_conntrack_ftp?
Maybe someone has a HowTo?
Thanks
Denis J.
reply other threads:[~2003-01-17 22:23 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='004201c2be77$21efbb20$fe00a8c0@SG1' \
--to=rinakkusu@pincushion.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox