after new iptables rules proftpd stopped working

arty · 06-30-2009, 03:45 PM

i have just setup a firewall using iptables on centos 5.3
but there's an issue with ftp
i can connect and i can login
when i give command "ls"
it says entering passive mode
and afterwards it times out
do you know why?
i have port 21 open in my firewall but still....

acid_kewpie · 06-30-2009, 04:02 PM

because FTP data doesn't use port 21, only FTP control does.

http://slacksite.com/other/ftp.html

If you use passive mode you'll need iptables to do connection tracking and permit "RELATED" connections, which will allow the FTP data side of the equation.

arty · 06-30-2009, 04:15 PM

yes, i can see the difference

so i want to use active not passive
how can i configure proftpd and iptables?

acid_kewpie · 06-30-2009, 04:41 PM

http://www.sns.ias.edu/~jns/wp/2006/...-tracking-ftp/

arty · 07-01-2009, 01:18 AM

thanks, i think this will solve pretty much everything :-)