Re: iptables, ftp and dnat?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>> iptables -I INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>
> Commenting it out, everything looks good until after I log in and try
> to do an "ls" when it returns:
> ftp> ls
> 227 Entering Passive Mode (10,1,1,32,205,208).
>
> Then nothing.
I've configured my ftp server to use a specific, small range of ports
for passive mode data, then poked a hole in the iptables filter for
them. What you're describing sounds like the reason I did that...
- --
Glenn English
ghe@slsware.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkk5lckACgkQ04yQfZbbTLbRZACfVLeqhijpDKKrinG7vAJZu8w4
OEMAni9ryKM4Mepy+APl16pZUWokrNY8
=b+z+
-----END PGP SIGNATURE-----
Reply to: