Firewalling Problem

Palula · 05-02-2006, 11:12 PM

Hi everybody!

I'm having problems opening port 21 (ftp) for incoming connections outside my LAN...

I'm using this rule to allow connections whenever I want to...

Code:

iptables -A INPUT -i $wanic -p tcp --dport 21 -j ACCEPT

This will allow tcp incoming connections that enter my wan nic destined to port 21.

Anyway, I can't connect outside the LAN. Inside my LAN i can connect nicely. But when I make probe testing to see if the port is open it shows stealth...

Even if I turn off all security (flushing all tables and policies), this port (plus port 80 and some others) still show as Stealth. I'm using vsftpd by the way...

iptables -L |grep ftp shows:

Code:

ACCEPT  tcp  --  anywhere   anywhere   tcp   dpt:ftp

Thanks in advance.

Brian1 · 05-03-2006, 03:54 PM

What is $wanic defined as in your script?
Mine would be more like this
IPTABLES -A ALLOW_PORTS -m state --state NEW -p tcp -i eth0 --dport 21 -j ACCEPT

Only other thing I can think of is something in /etc/vsftpd/vsftpd.conf

Brian1

Palula · 05-03-2006, 10:36 PM

I'm not having problems anymore...
The problem is with my ISP. It is blocking connections towards port 21.
I just had to change the port.
Thanks anyway!