Re: IPTABLES rules for active FTP
- From: Steve Flynn <anothermindbomb@xxxxxxxxx>
- Date: Tue, 19 May 2009 20:10:24 +0100
On Tue, May 19, 2009 at 6:22 PM, Noah <admin2@xxxxxxxxxxx> wrote:
Hi there,
What are the best iptables rules for active FTP connections?
Google should give you something along the lines of
/sbin/modprobe ip_conntrack_ftp
iptables -A INPUT -p TCP -i eth0 --dport 21 -m state --state NEW -j ACCEPT
iptables -A INPUT -p ALL -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -p ALL -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
Note - completely untested. I never have had a need to run anything
other than Passive.
--
Steve
When one person suffers from a delusion it is insanity. When many
people suffer from a delusion it is called religion.
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
- Follow-Ups:
- Re: IPTABLES rules for active FTP
- From: Noah
- Re: IPTABLES rules for active FTP
- References:
- IPTABLES rules for active FTP
- From: Noah
- IPTABLES rules for active FTP
- Prev by Date: Re: Binary incompatibility of Linux distributions
- Next by Date: Re: Ubuntu 8.04.2 LTSP sees Windows hosts but not shares
- Previous by thread: IPTABLES rules for active FTP
- Next by thread: Re: IPTABLES rules for active FTP
- Index(es):
Relevant Pages
|