search for: ip_conntrack_ftp

Hello CentOS, Is there a specific RPM that makes "insmod ip_conntrack_ftp" available? I've been using that on a number of servers fine, but the latest one I've built, running insmod ip_conntrack_ftp gives me: insmod: can't read 'ip_conntrack_ftp': No such file or directory -- Best regards, Mickael mailto:mike at kamloopsbc.com www.MickaelMa...

Hi, ok Im all new to this :-) for pasv ftp in your example you say for example to use ports 65500-65535, but i dont see that u open those ports in your example fw scripts..? any hints ? -- Christophe Zwecker mail: doc@zwecker.de Hamburg, Germany fon: +49 179 3994867 http://www.zwecker.de "Who is General Failure ? And why is he reading my disk

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=477 Summary: ip_conntrack_ftp.o: unresolved symbol ip_conntrack Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: normal Priority: P2 Component: ip_conntrack AssignedTo: laforge@n...

...logged back on and did another yum update, and it appeared as though things completed properly. Everything is working fine, up until one of my hosting clients noted that he is now unable to use ftp to update his web site. He could when I was running 4.2. Upon further inspection, I noted that the ip_conntrack_ftp module wasn't loaded. When I tried to insert it manually via "modprobe ip_conntrack_ftp" I get what appears to be a hang in the terminal session. Logging on via a separate session I can see that there are tons of "modprobe" processes being spawned. I can use ^C to break o...

I have edited modules and edited the ip_conntrack_ftp line to loadmodule ip_conntrack_ftp ports=3D21,62121 since i have a zope ftp instance on 62121, but i am still having some = problems that looks like they are NAT related, can i somehow see that = the conntrack module is infact handling 62121 for FTP?

Hello , Regarding a previous post in this group. (see below) Does anyone know how I can change the options for ipnat_ftp or ip_conntrack_ftp when I don''t load them as modules but have them compiled in the kernel? I''ve been looking on google since long now, but can''t seem to find it. Any idea, anyone? I have added these ''options'' and did a network restart, but it doesn''t seem to wor...

For some reason, ip_conntrack_ftp & ip_nat_ftp aren''t loading automatically. If I load them manually with modprobe FTP works. Both ip_conntrack_ftp & ip_nat_ftp are listed in the modules file - I haven''t mucked with the order at all, so I assume it''s right. I''m using Mandrake 9.2 but,...

...ze Used by Not tainted ipt_REDIRECT 728 0 (autoclean) ipt_MARK 728 2 (autoclean) iptable_mangle 2100 1 (autoclean) ipt_REJECT 2712 4 (autoclean) iptable_filter 1672 1 (autoclean) ip_nat_ftp 3760 0 (unused) ip_conntrack_ftp 3616 0 [ip_nat_ftp] ip_nat_irc 3024 0 (unused) iptable_nat 19608 3 [ipt_REDIRECT ip_nat_ftp ip_nat_irc] ip_conntrack_irc 2720 0 [ip_nat_irc] ip_conntrack 21372 3 [ipt_REDIRECT ip_nat_ftp ip_conntrack_ftp ip_nat rc iptable_nat ip_co...

As read here : http://www.sns.ias.edu/~jns/security/iptables/iptables_conntrack.html modprobe ip_conntrack_ftp would give me the ability to use active ftp if I have (pseudo/simplified code) iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -j DROP but I cant use active ftp, WHAT IS WRONG.. eth0 is the internal interface.. _____________________________________...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=477 netfilter@linuxace.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter@linuxace.com Status|NEW |RESOLVED Resolution|

this : iptables -A FORWARD -i internal-interface -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -j DROP doesn''t seem to work for active-ftp .. i even manualy loaded ip_conntrack_ftp but as u see it is unused : # lsmod Module Size Used by Not tainted ip_conntrack_ftp 4272 0 (unused) iptable_nat 17468 0 (autoclean) (unused) ipt_state 568 3 (autoclean) ip_conntrack 20616 3 (autoclean) [ip_conntrack_ftp...

I am trying to get the AllowFTP action to work for Net > DMZ traffic and FTP pasv. I know it is kind of working, as the user can log in, however, it fails at the port. I have had to open up some high ports for pasv to work. Now I know this aint cool, so does anyone know what a person has to do to get the AllowFTP action to work the same way it does if I was just ftp to the firewall, which does

...ddenly; only it works with active mode. The passive mode stops working and gives time out. Firewall is disabled and SELinux is set to permissive. I ran tcpdump and I noticed that only first three packets reached the FTP for passive mode and no more packets on other ports # lsmod | grep conntrack ip_conntrack_ftp?????? 41361? 1 ip_nat_ftp ip_conntrack_netbios_ns??? 36033? 0 ip_conntrack?????????? 91621? 5 ip_nat_ftp,ip_nat,ip_conntrack_ftp,ip_conntrack_netbios_ns,xt_state nfnetlink????????????? 40457? 2 ip_nat,ip_conntrack Any suggestion? Eng. Fawzy Ibrahim Linux Systems Administrator

I wrote in a thread entitled "ip_conntrack_ftp fails to load on CentOS4.3" that I had what I considered to be a borked upgrade, using yum update. When I went from 4.2 -> 4.3 I ceased to be able to use the ip_conntrack_ftp module, thus cutting off my users from ftp access. What I'd like to do is get yum to rerun its update procedur...

...t_ftp 2848 0 (unused) iptable_nat 22420 2 [ipt_REDIRECT ip_nat_ftp] ip_tables 13664 17 [ipt_IMQ ipt_REDIRECT ipt_ttl ipt_state ipt_REJECT ipt_connlimit ipt_LOG ipt_limit iptable_filter ipt_mac ipt_helper ipt_multiport ipt_MARK iptable_mangle iptable_nat] ip_conntrack_ftp 3872 1 ip_conntrack 28544 1 [ipt_REDIRECT ipt_state ipt_connlimit ipt_helper ip_nat_ftp iptable_nat ip_conntrack_ftp] rtc 6012 0 (autoclean) [...] Regards, -- Michal Kustosik

Still not working I really have to change 21 port on 80 port, my friend has only www and mail on his netwok. He has rigorous admin. I have done : !! in proftpd.cof : # Port 21 is the standard FTP port. Port 80 !! in /etc/shorewall/modules: loadmodule ip_conntrack_ftp ports=21,80 loadmodule ip_nat_ftp ports=21,80 AFTER THAT AND RESTARTTING PROFTP AND SHOREWALL still not work ...,so : !! in /etc/modules.conf:options ip_conntrack_ftp ports=21,49 options ip_nat_ftp ports=21,49 Restart shorewall, restart proftpd, restart conputer (serwer) and still not work...

-- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

...,RELATED -j ACCEPT > iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT > > > YOUR comments. > > > -- > Thank you > Indunil Jayasooriya If you want to run apps with different ports for control and data, you need to run ALG or Connection tracking helper ip_conntrack_ftp. Extracted from http://www.kalamazoolinux.org/presentations/20010417/conntrack.html Connection tracking and ftp Firstly, you need to load the ip_conntrack_ftp module. Assuming you have a single-homed box, a simple ruleset to allow an ftp connection would be: iptables -A INPUT -p tcp --spor...

...me set of firewall rules of 2.0.x (sorry, I can''t remember the exact minor version) and put it to work with 2.0.9. And now I can''t do passive ftp (was working before). I see that my NEWNOTSYN is set to Yes, and the loc->net rule is blocking 1024:65535. But I believe with the ip_conntrack_ftp, the passive mode would be allowed, since it''s a RELATED connection... I''d post more of my configuration if it''s useful. Thanks. __________________________________ Do you Yahoo!? The all-new My Yahoo! - What will yours do? http://my.yahoo.com

Hi At last i achive to make QOS works limitting bandwidth per port but with one exception : ftp. I don´t know why this port doesn´t works (aplies the default rule not the own). Anyone has experience with a similar problem? Thanks and regards David _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc