Displaying 1 result from an estimated 1 matches for "external_ip1".
Did you mean:
external_ip
2007 Mar 09
2
Mark on FTP passive traffic
...l traffic
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
# FTP rule
iptables -A FORWARD -i $INTERNAL_INTERFACE -o $EXTERNAL_INTERFACE1 -p
tcp -s $INTERNAL_LAN --sport $UNPRIVPORTS --dport 21 -m state --state
NEW -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE1 -p tcp -s $EXTERNAL_IP1
--sport $UNPRIVPORTS --dport 21 -m state --state NEW -j ACCEPT
# FTP mark
iptables -t mangle -A FORWARD -o $EXTERNAL_INTERFACE1 -p tcp --dport 21
-j MARK --set-mark 0x21
iptables -t mangle -A OUTPUT -o $EXTERNAL_INTERFACE1 -p tcp --dport 21
-j MARK --set-mark 0x21
iptables -t mangle -A PREROUT...