Askar Ali Khan wrote:
Hi Anthony,
On Sat, 24 Jul 2004 11:22:16 +0100, Antony Stone
<antony@xxxxxxxxxxxxxxxxxxxx> wrote:
#modprobe nat_ftpOn Saturday 24 July 2004 11:05 am, Askar Ali Khan wrote:
Hi
On my router/firewall which acting i am getting problem while anyone
tries to connect to ftp server he connected successfully however when
he types and command for example "ls" ftp server return error "500
Illegal PORT range rejected"
Everything else is working fine.
I see you are doing NAT on this firewall. Do you have the nat_ftp support module loaded or compiled in to your kernel?
Without that module, netfilter will not see the PORT commands in the FTP
packets, and will not know what to do with the data connection on port 20
associated with the control connection onn port 21.
modprobe: Can't locate module nat_ftp
Try ip_nat_ftp instead. Also, don't bother with port 20. Use a RELATED rule to let in the data connections. All this is documented in lots of howto's, www.netfilter.org is a good place to start.
HTH, M4
