On Thu, 2004-12-23 at 12:59, Noah Slater wrote: > Hello, > > I have a question regarding iptables and apt-get. I have a shell > script which is included at the bottom of this email which sets up > iptables for me. The only problem is that it is not managing to track > apt-get's ftp connections and prevents me from using it. I have > included a tail of /var/log/messages and the output when I try to run > apt-get. > > It seems to be failing to let ftp connections back into my box. > > I would be more than appreciative if someone could point out where I > am going wrong. it appears as though you don't have "ip_conntrack_ftp" loaded; therefore, there's nothing to recognize that the SYN from the FTP server is RELATED. -j -- "That's it! You people have stood in my way long enough. I'm going to clown college!" --The Simpsons