RE: Iptables and FTP problem

["Gerdriaan Mulder" <naairdreg@gmail.com>]

To use active FTP, try setting this option in your ftp client. Most
clients work standard in passive, but there must be an option to
change that.

edit: forgot sending to the list.
On 9/2/07, Mahdi Rahimi <rahimi@eaedu.net> wrote:
>
> my Rules for passive FTP look like this and works without problem but i
> want to my LAN works in active ftp.
>
> ###control connection
> $IPTABLES -A FORWARD -p tcp -s $LAN --sport 1024:65535 -d $EXT --dport 21
>         -m state --state NEW,ESTABLISHED -j ACCEPT
> $IPTABLES -A FORWARD -p tcp -s $EXT --sport 21 -d $LAN --dport 1024:65535
>          -m state --state RELATED,ESTABLISHED -j ACCEPT
>
> ###data connection
> $IPTABLES -A FORWARD -p tcp -s $LAN --sport 1024:65535 -d $EXT --dport
> 1024:65535
>         -m state --state RELATED,ESTABLISHED -j ACCEPT
> $IPTABLES -A FORWARD -p tcp -s $EXT --sport 1024:65535 -d $LAN --dport
> 1024:65535
>         -m state --state RELATED,ESTABLISHED -j ACCEPT
>
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>