hello,


pc need download file from internet ftp server, but can't now,
how set iptables ?

iptables mod
[root@ad ~]# lsmod |grep ip
ip_nat_ftp 7361 0
ip_conntrack_ftp 11569 1 ip_nat_ftp
iptable_mangle 6849 0
iptable_nat 11077 1
ip_nat 21101 2 ip_nat_ftp,iptable_nat
ipt_REJECT 9665 1
ip_conntrack 53281 5 ip_nat_ftp,ip_conntrack_ftp,iptable_nat,ip_nat,xt_state
nfnetlink 10713 2 ip_nat,ip_conntrack
xt_multiport 7233 6
iptable_filter 7105 1
ip_tables 17029 3 iptable_mangle,iptable_nat,iptable_filter
x_tables 17349 6 iptable_nat,ipt_REJECT,xt_state,xt_tcpudp,xt_multiport,ip_tables
ipv6 270305 31 cnic
xfrm_nalgo 13381 1 ipv6
dm_multipath 25421 0
scsi_dh 12097 1 dm_multipath
dm_mod 63225 11 dm_multipath,dm_raid45,dm_snapshot,dm_zero,dm_mirror,dm_log


thanks!

any idea ?

You will need a rule in FORWARD to allow the connection through the firewall after the connection, ESTABLISHED,RELATED will handle the ftp connections.

m_pahlevanzadeh

thanks!

-A FORWARD -s 172.16.0.0/255.255.255.0 -m state --state RELATED,ESTABLISHED -j ACCEPT

OK.

This thread is
[SOLVED]