Am Mit, 2003-08-27 um 19.36 schrieb David Luyens: > Hi, > > When a change the portnumber of my ftp deamon, the connection tracking > of netfilter does not work anymore. > Is it possible to say to netfilter to look at a different port (than > 21) for ftp connections? Yes, see: # modinfo ip_conntrack_ftp filename: /lib/modules/2.4.20-20.9/kernel/net/ipv4/netfilter/ip_conntrack_ftp.o description: <none> author: <none> license: "GPL" parm: ports int array (min = 1, max = 8) parm: loose int You can define the ports when loading the ip_conntrack_ftp module. Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org