Problem solved. It's actually being caused by the exterior firewall which is blocking the connections (strange because it has ipchains/ip_masq_ftp on it). I have retired this issue for myself until I upgrade the exterior firewall from RH61 to RH71 and put iptables on it. ----- Original Message ----- From: "Harald Welte" <laforge@gnumonks.org> To: "Jim Roland" <jroland@roland.net> Cc: <linux-net@vger.kernel.org>; "Linux Mailing List" <linux-admin@vger.kernel.org> Sent: Wednesday, August 22, 2001 7:42 PM Subject: Re: Passive FTP and iptables > On Sun, Aug 12, 2001 at 02:59:00AM -0500, Jim Roland wrote: > > > My problem: > > In passive mode, my FTP clients are able to obtain a control connection and > > login, but are unable to receive data (even a "dir" or "ls" fails). I know > > this is because the passive port (arbitrary) is being denied, but I am > > unable to make the ip_nat_ftp and ip_conntrack_ftp modules "see" the passive > > action. Active FTP (port 20:21 only) works just fine. > > this is very strange. > > > What iptables commands do I need to use to make passive FTP work? > > none. the conntrack and nat helpers for ftp supposrt PORT and PASV mode > straight forward. > > > Regards, > > Jim Roland, RHCE > > -- > Live long and prosper > - Harald Welte / laforge@gnumonks.org http://www.gnumonks.org > ============================================================================ > GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- > V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*) > - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
