Re: Problems with ftp

From: B H (check4junk_at_gmail.com)
Date: 12/09/04 

Date: Thu, 9 Dec 2004 01:12:26 +0100

"Kevin Collins" <spamtotrash@toomuchfiction.com> skrev i melding
> Have you tried "iptables -L" on your linux box? Quite likely it is
firewalling
> the incoming FTP data port even though you firewall may not be.
>
> As root, run "iptables -L" (also, try "ipchains -L" as either could be
running)
> and post your results. Running FTP in active mode requires allowing an
INCOMING
> connection to your system from the FTP server...
>
> Kevin

Here's the result. Hope somebody can decode this and
help.

===== "Iptables -L" as root ==============
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT ipv6-crypt-- anywhere anywhere
ACCEPT ipv6-auth-- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:5353
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:ftp
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:ssh
REJECT all -- anywhere anywhere reject-with
icmp-host-prohibited

===============================

Borge

Relevant Pages

  • Re: Problems with ftp
    ... "Kevin Collins" wrote in message ... > the incoming FTP data port even though you firewall may not be. ... Chain FORWARD ...
    (comp.os.linux.networking)
  • Re: Problems with ftp
    ... "Kevin Collins" skrev i melding ... > the incoming FTP data port even though you firewall may not be. ... Chain FORWARD ...
    (comp.os.linux.security)
  • Re: ftp & ipchains: using the chains approach this time
    ... That should make ftp work. ... > i *do not* want to open all udp ports above 1023 ... > Chain forward: ... > Chain icmp-acc (1 references): ...
    (comp.os.linux.security)
  • Re: blocking ports 1:1024
    ... do you have restrictions in the OUTPUT chain? ... > to act as a ftp client, you must allow outbound ftp. ... > all packets will be dropped - including those from the localhost. ...
    (comp.os.linux.networking)
  • Re: blocking ports 1:1024
    ... >> outgoing ones, but these are usually for ports beyond 1024. ... do you have restrictions in the OUTPUT chain? ... to act as a ftp client, you must allow outbound ftp. ... all packets will be dropped - including those from the localhost. ...
    (comp.os.linux.networking)