Re: FTP through ipmasq
On Mon, Aug 26, 2002 at 10:41:37PM -0700, Paul Johnson wrote:
> On Tue, Aug 27, 2002 at 01:19:12AM -0400, Simon Law wrote:
> > > OK...I haven't gotten into stateful firewalling much yet...could I get
> > > an example?
> >
> > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > iptables -A INPUT -m state --state INVALID -j DROP
>
> Awesome, that fixes inbound FTP, but continues to cause outbound to
> bitch and require passive FTP.
Outbound FTP? I'm not quite understanding what you're saying.
I suppose you'll also want to add this to your OUTPUT table, if you deny
things by default. If you're doing NAT, you might also need it in the
FORWARD table.
Simon
Reply to: