NetFilter
[Top] [All Lists]

RE: FTP Problem

To: <netfilter@lists.netfilter.org>
Subject: RE: FTP Problem
From: "Rob Sterenborg" <rob@sterenborg.info>
Date: Tue, 27 Feb 2007 09:23:02 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <45E33904.4060103@ducky.nl>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
References: <45E33904.4060103@ducky.nl>
Sender: netfilter-bounces@lists.netfilter.org
Thread-index: AcdZ35JGrBLDq2+3QfClnQ7Hy9iZHgAaJNXg
> Hi,
> 
> I'm a new user for netfilter en doesn't have experience with it...
> 
> I have written a simple firewall script in the past it works perfect,
> but know the FTP section doesn't work at all....
> 
> Maybe can somebody help me.
> 
> Here is my code :
> 
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables -A INPUT -p tcp -i eth0 -s any/0 -d any/0 --dport 21 -j
> ACCEPT iptables -A OUTPUT -p tcp -o eth0 -s any/0 --sport 21 -d any/0
> ! --syn -j ACCEPT iptables -A INPUT -p tcp -i eth0 -s any/0 -d any/0
> --dport 20 -j ACCEPT iptables -A OUTPUT -p tcp -o eth0 -s any/0
> --sport 20 -d any/0 ! --syn -j ACCEPT 

Did you "modprobe ip_conntrack_ftp" and "modprobe ip_nat_ftp" ?


Grts,
Rob




<Prev in Thread] Current Thread [Next in Thread>