Hello, [r...@host1 ~]# lsmod|grep ftp [r...@host1 ~]#
Output is nothing And: [r...@host1 ~]# iptables -A INPUT -i eth1 -m nf_conntrack_ftp -p tcp --dport 21 -d 192.168.1.254 -j ACCEPT iptables v1.4.3.1: Couldn't load match `nf_conntrack_ftp':/lib/xtables/libipt_nf_conntrack_ftp.so: cannot open shared object file: No such file or directory Try `iptables -h' or 'iptables --help' for more information. [r...@host1 ~]# No of the modules can't be loaded... Any other help ? Thanks ! j...@csk.umed.lodz.pl wrote: >What is output from command: >lsmod|grep ftp > >module nf_conntrack_ftp is a must for passive mode > >Dnia 27 Marca 2010, 09:42, So, Edward. S. P. Leong napisa?(a): > > >>ftp client ( passive mode ) : >>227 Entering Passive Mode (192,168,1,254,226,220). >>connecting to 192.168.1.254:58076 >>- - >>connecting to 192.168.1.254:58076 >>! Connection failed 192.168.1.254 - connection timed out >>! connect: error 0 >>PORT 192,168,1,101,17,247 >>200 PORT command successful >>LIST >>150 Opening ASCII mode data connection for file list >>Received 61 bytes in 0.1 secs, (6100.00 bps), transfer succeeded >>226 Transfer complete >> >>-------- Original Message -------- >>Subject: Firewall ( iptables ) enabled for ftp ( active mode & passive >>mode ) problem >>Date: Sat, 27 Mar 2010 16:39:01 +0800 >>From: Edward. S. P. Leong <edward...@ita.org.mo> >>To: fedora-l...@redhat.com <fedora-l...@redhat.com>, >>proftp-u...@lists.sourceforge.net >> >> >> >>Dear All, >> >>Mine is FC11 OS... >>So, how can we enable the firewall ( iptables ) for using ftp ( active >>mode & passive mode ) service ? >> >>For the existing setting : >>iptables -F >>iptables -X >>iptables -F -t nat >>iptables -X -t nat >>iptables -F -t mangle >>iptables -X -t mangle >> >>iptables -P INPUT DROP >>iptables -P OUTPUT ACCEPT >>iptables -P FORWARD ACCEPT >>iptables -t nat -P OUTPUT ACCEPT >>iptables -t nat -P PREROUTING ACCEPT >>iptables -t nat -P POSTROUTING ACCEPT >>iptables -t mangle -P PREROUTING ACCEPT >>iptables -t mangle -P POSTROUTING ACCEPT >>iptables -t mangle -P INPUT ACCEPT >>iptables -t mangle -P OUTPUT ACCEPT >>iptables -t mangle -P FORWARD ACCEPT >> >>iptables -A INPUT -i lo -j ACCEPT >>iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT >> >>int="eth1" >>int_add="192.168.1.254" >>int_src="192.168.1.0/24" >># Only allow users to use port 22 ( ssh services ) : >>iptables -A INPUT -i $int -p tcp --dport 22 -s $int_src -d $int_add -j >>ACCEPT >># Only allow users to use port 20 & 21 ( ftp services ) : >>iptables -A INPUT -i $int -p tcp --dport 20 -s $int_src -d $int_add -j >>ACCEPT >>iptables -A INPUT -i $int -p tcp --dport 21 -s $int_src -d $int_add -j >>ACCEPT >># ping ( ICMP ) >>iptables -A INPUT -i $int -p icmp --icmp-type echo-request -s $int_src >>-d $int_add -j ACCEPT >> >>Problem of ftp client : >>connection timenout >> >>Thanks ! >> >>Edward. >> >> >>-- >>users mailing list >>users@lists.fedoraproject.org >>To unsubscribe or change subscription options: >>https://admin.fedoraproject.org/mailman/listinfo/users >>Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines >> >> >> > > >
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
