From: Ralf Spenneberg <lists@spenneberg.org>
To: Peter Marshall <peter.marshall@caris.com>
Cc: Netfilter <netfilter@lists.netfilter.org>
Subject: Re: iptables and the RELATED option
Date: 12 Aug 2003 22:49:19 +0200 [thread overview]
Message-ID: <1060721359.4543.11.camel@kermit> (raw)
In-Reply-To: <01f801c36103$00a67150$49caa8c0@caris.priv>
Am Die, 2003-08-12 um 20.53 schrieb Peter Marshall:
> Hi, My name is Peter Marshall. I am having some problems letting ftp
> through my firewall without opening all of the ports. I was trying to get
> RELATED to work, but for some reason it will not. Here is an example of
> what my file looks like
>
> $TABLENAME -A FORWARD -d x.x.x.x -o eth2 -j mychain
>
> $TABLENAME -A mychain -m state --state ESTABLISHED,RELATED -j ACCEPT
> $TABLENAME -A mychain -j DROP
1.
You need a rule which allows new connections to the FTP-Server.
Additionally you have to load the module ip_conntrack_ftp
If using NAT you have to load ip_nat_ftp.
Cheers,
Ralf
--
Ralf Spenneberg
RHCE, RHCX
Book: Intrusion Detection für Linux Server http://www.spenneberg.com
IPsec-Howto http://www.ipsec-howto.org
Honeynet Project Mirror: http://honeynet.spenneberg.org
next prev parent reply other threads:[~2003-08-12 20:49 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-08-12 18:53 iptables and the RELATED option Peter Marshall
2003-08-12 20:49 ` Ralf Spenneberg [this message]
2003-08-13 11:01 ` Peter Marshall
2003-08-12 21:29 ` Rob Verduijn
2003-08-13 13:46 ` Peter Marshall
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1060721359.4543.11.camel@kermit \
--to=lists@spenneberg.org \
--cc=netfilter@lists.netfilter.org \
--cc=peter.marshall@caris.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox