Re: iptables as a stateful firewall

[Joe <joe@xxxxxxxxxx>]

Justin Zygmont wrote:

> I have setup iptables to do NAT and I was suprised that it still does not 
> appear to be doing stateful routing.  When I ftp to a remote system from a 
> machine behind the firewall, 'ls' still wont show a file listing, ICQ, 
> etc, cannot recieve files.  Here are my 2 lines for masquerading:
>
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
It's working fine here -

Are the ip_conntrack_ftp and ip_nat_ftp
modules loaded?

Joe