Hi !! .. i recently configure a redhat server with iptables to use as a firewall ... to connect remotely to my windows ... with DNAT i configured the tcp port 3389 ... and to have access to a website... with dnat i use port 80... but the problems come when i need to do the same thing with my ftp server on windows 2000 ... anyone know how can i do to "publish" my windows ftp service behind the iptables ... what are the rules ? ... do i need to install some extra module .. or something... any help will be appreciated ...


Cya...

Luciano.

just make sure the ip_conntrack_ftp keenle module is loaded with 'lsmod' as root.
if it isnt, add '/sbin/modprobe ip_conntrack_ftp' to /etc/rc.d/rc.local

and make sure incoming tcp packets to port ftp are accepted,
and tcp packets with state Established or related are allowed.

sonthing like.....

/sbin/iptables -A INPUT -p tcp --dport ftp -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT

should work... okay ?

You need to enable connection tracking. I use Redhat as a firewall also.. The is a great set of scripts that handles all of this type of stuff and some Denial Of Service stuff.
http://muse.linuxmafia.org/gshield/
If that is not to your likeing make sure that you load the ftp_conntract_ftp module and do stateful packet inspection.

I don't think gshield get enough press. It has got some good stuff.


Crap. qwijibow beat me to the punch.