Re: ftp from Red Hat AS 4.4 to Open VMS System

Troy Knabe wrote:
Thanks to everyone who responded. When you do an ls or dir on a remote host, it creates a "new" connection back to the server, so it is not persistent. It appears to be grabbing a random port in the 53*** area.

Is there syntax in iptables to allow all ports from a host over port 1024?

I also had to issue the *passive* command once connected before I could run an ls or dir.


If you want to have iptables firewalling between these two systems you could try the ftp_conntrack module. It is designed to handle this issue. It examines traffic on the standard FTP port which requests a DATA connection, and pokes dynamic holes in the iptables configuration to allow the data through.


--
Nigel Wade, System Administrator, Space Plasma Physics Group,
University of Leicester, Leicester, LE1 7RH, UK
E-mail : nmw@xxxxxxxxxxxx
Phone : +44 (0)116 2523548, Fax : +44 (0)116 2523555

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: portknocking question
    ... This is nice but still requires closing the port as a step when done. ... you can use a time out with the relevant iptables command ... You can easily close the connection automatically. ... In that example, any existing ssh connection, for example, will continue ...
    (Ubuntu)
  • Re: Help Needed: My RHEL5 box suddenly stopped accepting e-mails
    ... Here is the output of the 'iptables status' ... try telnetting to port 25 from off-host again. ... If you get the sendmail herald, ... until you get a "Connection refused" response. ...
    (RedHat)
  • Re: Adding Rules for Blackberry ES to ISA 2000 - SOLVED
    ... I found that their connection actually initiated a connection on port ... any lan machine to any outside host:: allow host to ... Note that in order to get outbound bes to work on an isa server (when ...
    (microsoft.public.isaserver)
  • Re: Adding Rules for Blackberry ES to ISA 2000 - SOLVED
    ... I found that their connection actually initiated a connection on port ... any lan machine to any outside host:: allow host to ... Note that in order to get outbound bes to work on an isa server (when ...
    (microsoft.public.isaserver)
  • iptables and ftp problems via masquerading
    ... Connection failed XXX.XXX.XXX.XXX - connection timed out ... 530 Only client IP address allowed for PORT command. ... i've setup my iptables firewall script to allow masquerading, ... $IPTABLES -A BLOCK -j DLOG ...
    (comp.os.linux.security)