ftp firewall/iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Thu, 2005-07-07 at 16:55 -0700, Dave wrote:
> I just installed CentOS4 on my main server. It runs proftpd and is not NATted..
> 
> When I did the install I said to allow FTP and HTTP. I can ftp from
> windows dos ftp client.
> 
> In IE I get "Unable to build data connection: No route to host"  
> 
> ncftp I get.. 
> Data connection timed out.
> Falling back to PORT instead of PASV mode.
> List failed.
> 
> Wget and FireFox just time out.
> 
>  Anything I need to add to the firewall rules? This is all it has
> related to FTP.
> -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT


You need to load the ip_conntrack_ftp.ko module.

You'll also need to open the ports for PASSV support. Some ftp servers
let you pin those in the config.

Sean


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux