Stateful firewalling via IPTABLES fails to track FTP passive connections?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sunday 06 October 2002 11:10, Hubris_1 wrote:
> So, my question boils down to this - does IPTables inspect the PASV request
> and reply to open the correct FTP data port if using stateful inspection?
> Or do you essentially need to open all high-level ports to get passive FTP
> working?

modprobe ip_conntrack_ftp
modprobe ip_nat_ftp

should do it.
-- 
Martijn




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux