Problem with Firewall!!!

L1nuxbug · 10-06-2006, 03:21 AM

Hi guyz..
i have RH AS 4, have configured FTP (vsftpd) server. when ever i enable firewall and custamize its setting for FTP allow, its ok...
and when i try to connect to FTP from other machine. it gives following Error.
Access Denied, you do not have enuff permissions..
when its not enabled thn ftp works fine...

i want to enable firewall and run FTP and HTTP servers.

Any help ??

win32sux · 10-06-2006, 06:38 AM

do you have the ip_conntrack_ftp module loaded??

L1nuxbug · 10-07-2006, 12:45 AM

shud i load it through vsftpd.conf file ??
tell me how to check...if its loaded or not... and whats its purpose..?

L1nuxbug · 10-09-2006, 01:37 AM

???????.............???

win32sux · 10-09-2006, 03:49 AM

Quote:

Originally Posted by L1nuxbug

shud i load it through vsftpd.conf file ??
tell me how to check...if its loaded or not... and whats its purpose..?

it's purpose is to allow the kernel to track FTP connections (on the state table)... it's a kernel module, so you'd load it with the modprobe command... you can check if the module is loaded by doing a:

Code:

lsmod | grep ip_conntrack_ftp

if it's not loaded, you can load it with a:

Code:

modprobe ip_conntrack_ftp

keep in mind that if you compiled support for this into your kernel (instead of as a module) then this wouldn't be necessary at all... also keep in mind that i'm NOT saying this is definitely the cause of your problem...

L1nuxbug · 10-09-2006, 05:34 AM

lsmod | grep ip_conntrack_ftp
does not show any output...
now what ? nor the second one...

win32sux · 10-09-2006, 05:37 AM

Quote:

Originally Posted by L1nuxbug

lsmod | grep ip_conntrack_ftp
does not show any output...
now what ? nor the second one...

check with lsmod again after having done the modprobe...

make sure you are doing this as root...

BTW, the "Access Denied" message you get isn't being generated by a Squid cache by any chance is it??

L1nuxbug · 10-09-2006, 06:24 AM

[root@localhost ~]# lsmod | grep ip_conntrack_ftp
ip_conntrack_ftp 76273 0
ip_conntrack 45957 2 ip_conntrack_ftp,iptable_nat

Yes thats what i get after modprob....