RE: FTP SERVER ACCESS ( IPT_UNCLEAN PROBLEM?)

[jose nuno neto <jose.neto@liber4e.com>]

Thanxs for your help,

I've dig into the /var/log/messages and found this message everytime i
tried to connect to the ftp server(it the same as the firewall)

Oct 27 16:22:41 bob kernel: ipt_unclean: TCP option 8 after end

Did this: tcpdump dst port ftp

16:22:41.317744 213.22.184.162.1844 > bob.liber4e.com.ftp: S
2900698949:2900698949(0) win 5840 <mss 1460,eol> (DF)
16:22:44.316286 213.22.184.162.1844 > bob.liber4e.com.ftp: S
2900698949:2900698949(0) win 5840 <mss 1460,eol> (DF)
16:22:50.301330 213.22.184.162.1844 > bob.liber4e.com.ftp: S
2900698949:2900698949(0) win 5840 <mss 1460,eol> (DF)
16:23:02.313601 213.22.184.162.1844 > bob.liber4e.com.ftp: S
2900698949:2900698949(0) win 5840 <mss 1460,eol> (DF)

But i dont understand nothing of this, do u?

I've found the UN_CLEAN chain from the iptables script and commented it
and now ftp works :-)

# Block (inbound) Traffic w/ Incorrect Flags
#$IPT -N IN_UNCLEAN
#$IPT -t filter -I INPUT -i $IF -m unclean -j IN_UNCLEAN
#$IPT -t filter -I IN_UNCLEAN -j LOG --log-prefix "** UNCLEAN ** "
#$IPT -t filter -I IN_UNCLEAN -j UNCLEAN

But i dont figured out what was happenning....
/var/log/messages also shoes this:
Oct 27 16:24:00 bob kernel: device eth0 entered promiscuous mode
Oct 27 16:24:26 bob kernel: device eth0 left promiscuous mode

Any clues on what happened?


-- 
Best Regards,

Jose' Nuno Neto
TLM: 00 351 96 2808587