[Shorewall-users] pasv ftp

Christophe Zwecker
Tue, 22 Jan 2002 11:19:17 -0000

Hi,

ok it works if I let shorewall pass the params, however I noticed fxp
doesnt work. There is a patch for the ip_conntrack_ftp module, tho not
for recent kernels. I wonder if there is anything shorewall can "do"
about it.

Or maybe someone got the patched module for 2.4.16 ?

best regards,

Christophe

On Mon, 2002-01-21 at 15:41, Tom Eastep wrote:

>
> Er -- just how do you think ip_conntrack_ftp knows that port 24562 is
FTP
> unless you tell it?
>
> In /etc/modules.conf (or whatever your distro calls it), add:
>
> options ip_nat_ftp ports=21,24562
> options ip_conntrack_ftp ports 21,24562
>
> And, you will have to unload/reload those two modules.

--
Christophe Zwecker
:Sysctl
Susannenstr. 26-28
20357 Hamburg
phon/fax: +49 40 43099296/7
mail: czwecker@sysctl.de