Re: iptables not so stateful

[John L Fjellstad <john-debian@fjellstad.org>]

Clement <clement@ans.com.au> writes:

> And I cannot do ftp.  All the data mode traffic of FTP are blocked.
> Apparently the ESTABLISHED,RELATED specification is not followed.  The
> module ipt_state is there and executing the above does not show any
> error message.  I have tried "modprobe ipt_state" before the above to
> no success.  Any idea?

Make sure the modules ip_conntrack_ftp.ko, ip_nat_ftp.ko and
ip_conntrack_ftp.ko are loaded.  Especially the ftp ones needs to be
loaded, and they sometimes don't get loaded automatically (happens to me
a couple of times)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/          Quis custodiet ipsos custodes