LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-11-2006, 03:17 PM   #16
bitpail
LQ Newbie
 
Registered: Oct 2006
Distribution: Fedora 6/SUSE 10
Posts: 20

Original Poster
Rep: Reputation: 0

The command was run on the box with vsftpd running on it. There are no stupid questions, many times its the stupid questions that solve the problem.

Could it have anything to do with the following settings?

pasv_enable=YES
pasv_promiscuous=YES
port_promiscuous=YES

I know that they don't recommend using the promiscuous modes, could this be what is causing the problems? Could it be the passive connection being allowed? Again I'm pretty new at this stuff so I'm taking some shots in the dark here.
 
Old 12-11-2006, 04:01 PM   #17
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by bitpail
The command was run on the box with vsftpd running on it. There are no stupid questions, many times its the stupid questions that solve the problem.

Could it have anything to do with the following settings?

pasv_enable=YES
pasv_promiscuous=YES
port_promiscuous=YES

I know that they don't recommend using the promiscuous modes, could this be what is causing the problems? Could it be the passive connection being allowed? Again I'm pretty new at this stuff so I'm taking some shots in the dark here.
i think it could have something to do with it... it's my understanding that to filter packets in promiscuous mode you'd need to do so at layer 2 (MAC address, etc.)... but iptables works at layer 3 (although there is a MAC address match module)... but considering that packets coming from the Internet don't have MAC addresses i'm not sure how you'd go about it... but if this is indeed the way it works, then it would make sense for your iptables rules to have no effect... keep in mind i don't really know much if anything about this sort of stuff so you might wanna wait for someone more knowledgable than me to chime-in... that said, i don't think you'd have anything to lose by doing a test in non-promiscuous mode... who knows - your shot in the dark might be a direct hit...

Last edited by win32sux; 12-11-2006 at 04:05 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
no signal when starting xorg for the 1st time (but the second time works fine) bungalowbill Linux - Software 0 06-04-2004 09:56 AM
bittorrent / iptables (?) problem (works more or less :x) nei Linux - Networking 2 03-31-2004 06:34 AM
Soundcard works sometimes, not all the time Forezt Fedora 8 03-02-2004 08:18 PM
How Iptables works Half_Elf Linux - Security 5 07-11-2002 09:03 PM
IpTables port forwarding works but cant get out acdcbag Linux - Networking 1 11-08-2001 03:48 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:35 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration