I have a problem inserting the ipt_nat_module
insmod ip_nat_ftp
Using /lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_nat_ftp.o
/lib/modules/2.4.20/kernel/net/ipv4/netfilter/ip_nat_ftp.o: init_module:
Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including
invalid IO or IRQ parameters.
You may find more information in syslog or the output from dmesg
Any ideas?
-----Mensaje original-----
De: netfilter-admin@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] En nombre de Mark E. Donaldson
Enviado el: sábado, 17 de abril de 2004 21:06
Para: 'IT Clown'; netfilter@xxxxxxxxxxxxxxxxxxx
Asunto: RE: passive ftp
-----Original Message-----
From: netfilter-admin@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of IT Clown
Sent: Saturday, April 17, 2004 10:51 AM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: passive ftp
Hi
I am having some trouble to access passive mode ftp sites.I have a firewall
with ip forwarding enabled.When a pc on the network want to access passive
ftp servers i need to do the following in my rules ( on the server ):
-A OUTPUT -p tcp -m multiport --dport 21,20 -j ACCEPT -A INPUT -m state
--state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -j ACCEPT -A
FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
But i do not want every query to be forwarded i only want say ftp access to
be forwarded. Why does the following not work ( on the server ):
-A FORWARD -p tcp -i eth0 -o ppp0 --dport 20 -j ACCEPT -A FORWARD -p tcp -i
eth0 -o ppp0 --dport 21 -j ACCEPT -A FORWARD -m state --state
RELATED,ESTABLISHED -j ACCEPT Regards
______________________________________________________________
Herbalife Independent Distributor http://www.healthiest.co.za
Be sure you have the two support modules you need loaded:
$MODPROBE ip_nat_ftp
$MODPROBE ip_conntrack_ftp
Passive FTP data transfers take place on a "high port" that the server
recommends to the client, and the client then establishes the new connection
on that high port that the server uses as well. Neither Port 20 or 21 are
used during this part of the process. Therefore, the ftp connection
tracking modules are necessary for all this to happen.
