Hi,
there seems to be a problem within my FTP rules. I'm not able to make any
ftp connection.
I'm able to send but not to recevie any package.
Maybe someone can point me to my mistake.
iptables -N ftp
#No incomming connections, only outgoing and only in PASV mode.
iptables -A ftp -p tcp --dport 20:21 -o $I_EXTERN -j ACCEPT
iptables -A ftp -p tcp --sport 20:21 -i $I_EXTERN -m state --state
ESTABLISHED,RELATED -j ACCEPT
iptables -A ftp -p tcp --dport 20:21 -i $I_EXTERN -m state --state
NEW,INVALID -j LOG --log-level warning --log-prefix "DROP:FTP Incomming"
iptables -A ftp -p tcp --dport 20:21 -i $I_EXTERN -m state --state
NEW,INVALID -j DROP
iptables -A INPUT -j ftp
iptables -A OUTPUT -j ftp
iptables -A FORWARD -j ftp
all I get after some tries to establish a connection from my firewall to
ftp.funet.fi:
iptables -v -L ftp
pkts bytes target prot opt in out source destination
20 1200 ACCEPT tcp -- any ppp+ anywhere anywhere tcp
dpts:ftp-data:ftp
0 0 ACCEPT tcp -- ppp+ any anywhere anywhere tcp
spts:ftp-data:ftp state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state RELATED,ESTABLISHED
0 0 LOG tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state INVALID,NEW LOG level warning prefix `DROP:FTP
Incomming'
0 0 DROP tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state INVALID,NEW
--------------------------
Thanks in advance
Erik Pagel
