Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Nick <fenderflames@yahoo.com>
To: netfilter@lists.netfilter.org
Subject: Re: FORWARD question
Date: Fri, 21 Nov 2003 02:42:39 -0800 (PST)	[thread overview]
Message-ID: <20031121104239.37088.qmail@web40804.mail.yahoo.com> (raw)
In-Reply-To: <200311202312.hAKNC8723820@onyx.rockstone.co.uk>

Thanks Antony, I got it. Once nat and conntrack
helpers are implemented correctly, I don't have to
worry about it anymore :-)

There is one last thing, though(I promise it's the
last one ;-)

When I said that only port 21 is open I meant that on
the router machine only this port accepts NEW client
connections. The other ports will accept only
ESTABLISHED and RELATED. I defined this in my INPUT
rules. 

Do I need to accept NEW client connections to port 20
as well ? I know it's used for active FTP and I
thought FTP client never sends NEW to port 20, only
ESTABLISHED.

What do you think? I appreciate your help

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/


  reply	other threads:[~2003-11-21 10:42 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-11-20 20:27 FORWARD question Nick
2003-11-20 20:51 ` Antony Stone
2003-11-20 21:51   ` Nick
2003-11-20 23:12     ` Antony Stone
2003-11-21 10:42       ` Nick [this message]
2003-11-21 11:34         ` Antony Stone
2003-11-21 11:59           ` Nick
2003-11-21 12:38             ` Antony Stone
2003-11-21 13:08               ` Antony Stone
2003-11-21 13:24                 ` Nick
2003-11-21 13:50                   ` Jeffrey Laramie
2003-11-21 14:06                     ` Nick
2003-11-21 14:11                     ` Antony Stone
2003-11-21 16:19                       ` redirect squid to other proxy(windows) hearing in port 80 Guillermo
2003-11-21 16:43                         ` Antony Stone
2003-11-21 16:44                         ` Antony Stone
2003-11-20 22:18   ` FORWARD question Nick
  -- strict thread matches above, loose matches on Subject: below --
2003-11-20 20:01 Nick

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20031121104239.37088.qmail@web40804.mail.yahoo.com \
    --to=fenderflames@yahoo.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox