Re: Broken ftp through iptables

[Alistair Tonner <Alistair@nerdnet.ca>]

	And recall that this will only work if the FTP port is the standard FTP port.

	If you are using a NON-standard ftp port, you need to pass the ports=21,xx
	option to both modules.

On August 26, 2003 11:42 am, Landon Chelf wrote:
> Thanks but it is loaded from what I can tell.  Below is the iptables
> stuff of an lsmod
>
> Module                  Size  Used by    Not tainted
> ip_conntrack_ftp        5296   0  (unused)
> ip_conntrack           26976   1  [ip_conntrack_ftp]
> iptable_filter          2412   1  (autoclean)
> ip_tables              15096   1  [iptable_filter]
>
> -----Original Message-----
> From: Jamie Pratt [mailto:jamie@nucdc.org]
> Sent: Tuesday, August 26, 2003 11:31 AM
> To: Landon Chelf
> Subject: Re: Broken ftp through iptables
>
>
> hi - do you have the ip_conntrack_ftp module loaded on the server?
> (lsmod command will show you all the modules that are currently
> loaded).. - if not, try putting 'insmod ip_conntrack_ftp' in your
> script.. (near the top obviously ;-)
>
> jamie
>
> Landon Chelf wrote:
> > Hello,
> >
> > I've ran into a recent problem both on rh8 and rh9 using iptables.
> > I've setup my firewall to drop everything incomming and forward and am
> >
> > only allowing certain ports to be open.  I've opened ftp (port 21 tcp)
> >
> > and I can connect via FTP from one machine and authenticate, but when
> > I issue my first command like "ls" for instance the connection locks
> > up and won't do anything.  Is there a way to fix this?
> >
> > Landon

-- 

	Alistair Tonner
	nerdnet.ca
	Senior Systems Analyst - RSS
	
     Any sufficiently advanced technology will have the appearance of magic.
	Lets get magical!