IPTables :: Allowing passive FTP

Swakoo · 04-16-2007, 11:38 PM

Hi guys,

I realise with iptables on, I can't connect via passive ftp.
While its no issue to connect with active ftp, but filezilla defaults to passive ftp and I was hoping to allow it so as not to leave my end-users with too many question marks.

How should I go about it? tried a few methods online but couldn't work.

I amusing either RHEL or CentOS.

Thanks!

sin · 04-17-2007, 04:37 AM

Sounds like you need to investigate

ip_conntrack_ftp

and

ip_conntrack

fotoguy · 04-17-2007, 06:37 PM

Sin is right, you need to load the 2 modules for passive ftp. Once you load the modules you can write a rule for port 21 and then ip_conntrack_ftp and ip_conntrack will take care of port 20 (data) automatically for you.

Swakoo · 04-18-2007, 04:54 AM

ok got it. thanks for the tip!

basically i run "/sbin/modprobe ip_conntrack_ftp " in rc.local

it works now

fotoguy · 04-19-2007, 10:26 PM

Quote:

Originally Posted by Swakoo

ok got it. thanks for the tip!

basically i run "/sbin/modprobe ip_conntrack_ftp " in rc.local

it works now

Good to hear its working