Hi list, im having a problem with proftpd access when my firewall is running. Im using centos 4.3 with proftpd-1.2.10-10.2.el4.rf i haven't done any modification from my proftpd i just run the server. my iptables ruleset is very simple i use stateful routing. iptables -A INPUT -i ! $WAN -j ACCEPT iptables -A INPUT -i $WAN -m state --state NEW -p tcp --dport 21 -j ACCEPT -- Regards, Mark Quitoriano, CCNA Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441 -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20060831/244fde31/attachment-0002.html>
> im having a problem with proftpd access when my firewall is running. Im > using centos 4.3 with proftpd-1.2.10-10.2.el4.rf > > i haven't done any modification from my proftpd i just run the server. my > iptables ruleset is very simple i use stateful routing. > > iptables -A INPUT -i ! $WAN -j ACCEPT > iptables -A INPUT -i $WAN -m state --state NEW -p tcp --dport 21 -j ACCEPTI suspect your problem might be related to PASV ftp jumping up to a higher power. You need to set an upper and lower port bound for PASV ftp, or enable ftp connection tracking by loading the appropriate iptables module. -- During times of universal deceit, telling the truth becomes a revolutionary act. George Orwell