|
Hi people.
I got active FTP working, but i also need the
passive one.
Here is my stuff:
# Port 21
iptables -A
INPUT -p tcp --sport 21 -m state --state ESTABLISHED -j
ACCEPT
iptables -A OUTPUT -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT # aktiv -
works
iptables -A INPUT -p tcp --sport 20 -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -p tcp --dport 20 -m state --state ESTABLISHED -j ACCEPT # passiv
iptables -A INPUT -p tcp --sport ${UNPRIVPORTS} --dport ${UNPRIVPORTS} -m state --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -p tcp --sport ${UNPRIVPORTS} --dport ${UNPRIVPORTS} -m state --state ESTABLISHED,RELATED -j ACCEPT I have everything set to drop and i am alowing this
protocols and ports:
# TCP
in+out
# # TCP_IN_OUT="ssh" # TCP out
# # 5190 = ICQ # TCP_OUT="5190 http https 25 ftp ftp-data pop3 smtp" # TCP in
# TCP_IN="" # UDP in+out
# UDP_IN_OUT="domain ssh" # UDP out
# # UDP_OUT="https" # UDP in
# UDP_IN="" UNPRIVPORTS="1024:65535"
So.. i must now allow the UNPRIVPORTS, but how i am
doing this?
Thanks, Christian
Gmeiner
|
