LinuxQuestions.org - Firewalling Problem

- Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)

- - Firewalling Problem (https://www.linuxquestions.org/questions/linux-networking-3/firewalling-problem-441109/)

Firewalling Problem

Hi everybody!

I'm having problems opening port 21 (ftp) for incoming connections outside my LAN...

I'm using this rule to allow connections whenever I want to...

Code:

iptables -A INPUT -i $wanic -p tcp --dport 21 -j ACCEPT

This will allow tcp incoming connections that enter my wan nic destined to port 21.

Anyway, I can't connect outside the LAN. Inside my LAN i can connect nicely. But when I make probe testing to see if the port is open it shows stealth...

Even if I turn off all security (flushing all tables and policies), this port (plus port 80 and some others) still show as Stealth. I'm using vsftpd by the way...

iptables -L |grep ftp shows:

Code:

ACCEPT tcp -- anywhere anywhere tcp dpt:ftp

Thanks in advance.

What is $wanic defined as in your script?
Mine would be more like this
IPTABLES -A ALLOW_PORTS -m state --state NEW -p tcp -i eth0 --dport 21 -j ACCEPT

Only other thing I can think of is something in /etc/vsftpd/vsftpd.conf

Brian1

I'm not having problems anymore...
The problem is with my ISP. It is blocking connections towards port 21.
I just had to change the port.
Thanks anyway!