ipchains, ftp from client to non-ftp ports
 

Hi all

From a client computer running behind my slackware 8 firewall (ipchains 1.3.10), I am trying to ftp to non-ftp ports, however it starts to log in and just hangs. The only ports that I can ftp to from my client machine are ports 20 or 21. Likewise, I am having similar problems trying to listen to streams on port 8000 or whichever from the client machine as well. My rc.firewall is a pretty common script but here is the relevent stuff:

#comments
/sbin/depmod -a

#more comments
/sbin/modprobe ip_masq_raudio

#even more comments
echo "1" > /proc/sys/net/ipv4/ip_forward

#and again more comments
/sbin/ipchains -M -S 7200 10 160

#and then finally
/sbin/ipchains -F forward
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.2/24 -j MASQ

I've spent day after day learning about ipchains but I'm not really finding anything on allowing client machines to ftp to non-ftp ports or streaming music on something other than port 80. Any info would be sooooo peace.

Thank-you.

Are you using passive of active FTP?

You might want to try to find out how the ipchains-FTP support works, it may only look for connections on the usual FTP data/control ports.

cheers

Jamie...

aha, I totally forgot about that, thanks for putting me in the right direction. Now I just have to figure out the streaming thing.

thanks again.