On Sun, Aug 12, 2001 at 02:59:00AM -0500, Jim Roland wrote: > My problem: > In passive mode, my FTP clients are able to obtain a control connection and > login, but are unable to receive data (even a "dir" or "ls" fails). I know > this is because the passive port (arbitrary) is being denied, but I am > unable to make the ip_nat_ftp and ip_conntrack_ftp modules "see" the passive > action. Active FTP (port 20:21 only) works just fine. this is very strange. > What iptables commands do I need to use to make passive FTP work? none. the conntrack and nat helpers for ftp supposrt PORT and PASV mode straight forward. > Regards, > Jim Roland, RHCE -- Live long and prosper - Harald Welte / laforge@gnumonks.org http://www.gnumonks.org ============================================================================ GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*) - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html