Make sure you accept the packets in the RELATED and ESTABLISHED state. On Thu, 28 Oct 2004 12:18:24 +0200, Mohamed Eldesoky <eldesoky.lists@xxxxxxxxx> wrote: > Dear all, > > I have a server that runs FTP on two ports, port 21 and port 45 (for > strange reasons) > Now, i want conntrack to track the connections of both ports and their > data ports !! > > I did that in my firewall script > /sbin/modprobe ip_conntrack_ftp ports=21,45 > $IPTABLES -A linweb_chain -p tcp -m multiport --destination-port > 80,21,45 -j ACCEPT > > Is that all I need ?? > > -- > Mohamed Eldesoky > www.eldesoky.net > RHCE > > -- Bla bla