Re: iptables not so stateful

["s. keeling" <keeling@spots.ab.ca>]

Incoming from Eric Gaumer:
> On Fri, 2004-08-13 at 09:20, Clement wrote:
> > 
> > And I cannot do ftp.  All the data mode traffic of FTP are blocked.  
> 
> You have to use passive FTP for connection tracking to work. If you use

I was going to mention that but:

     -p       Enable passive mode operation for use behind connection filter­
              ing firewalls.  This option has been deprecated as ftp now tries
              to use passive mode by default, falling back to active mode if
.....................^^^^^^^^^^^^^^^^^^^^^^^


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)               http://www.spots.ab.ca/~keeling 
- -