CentOS - Aug 2006 - proftpd and iptables problem

Hi list,

im having a problem with proftpd access when my firewall is running. Im
using centos 4.3 with proftpd-1.2.10-10.2.el4.rf

i haven't done any modification from my proftpd i just run the server. my
iptables ruleset is very simple i use stateful routing.

iptables -A INPUT -i  ! $WAN -j ACCEPT
iptables -A INPUT -i $WAN -m state --state NEW -p tcp --dport 21 -j ACCEPT





-- 
Regards,
Mark Quitoriano, CCNA

Fan the flame...
spreadfirefox.com/?q=user/register&r=19441
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<lists.centos.org/pipermail/centos/attachments/20060831/244fde31/attachment-0002.html>

> im having a problem with proftpd access when my firewall is running. Im
> using centos 4.3 with proftpd-1.2.10-10.2.el4.rf
>
> i haven't done any modification from my proftpd i just run the server.
my
> iptables ruleset is very simple i use stateful routing.
>
> iptables -A INPUT -i  ! $WAN -j ACCEPT
> iptables -A INPUT -i $WAN -m state --state NEW -p tcp --dport 21 -j ACCEPT
I suspect your problem might be related to PASV ftp jumping up to a
higher power. You need to set an upper and lower port bound for PASV
ftp, or enable ftp connection tracking by loading the appropriate
iptables module.


-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell