LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-17-2003, 05:43 AM   #1
rexmundi
LQ Newbie
 
Registered: Oct 2003
Location: Schoonhoven, Netherlands
Distribution: RedHat, LinuxFromScratch
Posts: 13

Rep: Reputation: 0
vsftpd + iptables problems on RedHat 9


My network connects to the Internet via a masquerading router. This router runs RedHat Linux 9, and runs the vsftpd that comes with RHL9. My firewall/routing script is set up to allow traffic through ports 20 (ftp-data), 21 (ftp-control) and any port 1024-max.
FTP uploading from the Internet works fine for small files, but when I send a lot of them or a large one something weird happens. Sometimes my FTP transfer just stalls but I can still log in to the router with SSH and it still lets HTTP traffic through to my webserver. But most of the time when my FTP transfer stalls SSH and HTTP stop working aswell.
I attempted to fix the problem by modprobing ip_conntrack_ftp and ip_nat_ftp, but that doesn't seem to do much good either.
I anyone here has vsftpd running on RHL9 without problems with large uploads, or knows why my router seems to lock up, or has any other usefull information whatsoever, I'd love to hear (well, read, but you take my meaning) it.

TIA, Rogier
 
Old 10-17-2003, 05:54 AM   #2
rexmundi
LQ Newbie
 
Registered: Oct 2003
Location: Schoonhoven, Netherlands
Distribution: RedHat, LinuxFromScratch
Posts: 13

Original Poster
Rep: Reputation: 0
Oh, some more info that might be usefull
SSH sessions seem to time out waiting for authentication after FTP stalls (SSH works just fine otherwise).
The vsftpd log file shows absolutely nothing, I should probably make it log more stuff though.
HTTP is forwarded like so:
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 80 -m state --state NEW -j DNAT --to-destination 10.0.0.3:80
iptables -t filter -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
(or something like that, I'm not at home and SSH won't let me in no more since my large FTP transfer failed, so this is from memory).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Little vsftpd +iptables problem yvesg Linux - Networking 3 08-15-2005 05:55 PM
iptables and vsftpd on firewall box - can't connect radiowhiz Linux - Networking 6 03-30-2005 12:03 PM
IPtables for VSFTPD problem ryancoolest Linux - Security 3 03-12-2004 06:44 AM
Redhat 9.0 and IPTables Problems ordoz Linux - Security 3 11-14-2003 10:30 AM
vsftpd problem with iptables bodimir Linux - Networking 2 07-25-2003 04:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration