Re: Possible problem with FTP ALG

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2004-11-29 at 07:46, Ashutosh wrote:
> Hi folks,
> 
> I am running Linux 2.4.20 on my router with LAN IP FILTER rules as -
> 
> Allow from LAN to WAN on port 21
> Deny all from LAN to WAN
> 
> Now, when I ftp to a machine on the WAN Only the control connection
> opens ( Login is fine), but the data connection does not open. The
> machine freezes when I do an "ls".. I am using passive ftp here.
> 
> When I put printk's in the code, the expected is added, the CT is formed
> and NF_DROP does get called at any stage
> 
> Kindly Help!!!
> 
> Regards

sounds like you don't have ftp conntrack/nat (you don't actually say
whether you're using NAT or not) modules loaded.

  modprobe ip_conntrack_ftp
  modprobe ip_nat_ftp

-j

--
"You must be the man who didn't know whether it was a blister or
 a boil.
 It was a gummi bear."
	--The Simpsons



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux