Re: FTP through ipmasq
On Mon, Aug 26, 2002 at 10:41:37PM -0700, Paul Johnson wrote:
> On Tue, Aug 27, 2002 at 01:19:12AM -0400, Simon Law wrote:
> > > OK...I haven't gotten into stateful firewalling much yet...could I get
> > > an example?
> > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > iptables -A INPUT -m state --state INVALID -j DROP
> Awesome, that fixes inbound FTP, but continues to cause outbound to
> bitch and require passive FTP.
Outbound FTP? I'm not quite understanding what you're saying.
I suppose you'll also want to add this to your OUTPUT table, if you deny
things by default. If you're doing NAT, you might also need it in the