Re: A note about firewalls and ftp servers.

From: Tommaso Di Donato (t.didonato@sicurweb.it)
Date: 09/27/01 

Message-Id: <5.1.0.14.0.20010927084525.00ab4d68@relay1.it.net>
Date: Thu, 27 Sep 2001 09:03:20 +0200
To: focus-linux@securityfocus.com
From: Tommaso Di Donato <t.didonato@sicurweb.it>
Subject: Re: A note about firewalls and ftp servers.

Yes, this is true, and it works great! Connection tracking is what makes me
love iptables!!!
I heard about other problems with FTP: if your ftp server is running a
private IP and you use iptables to NAT, user outside the firewall could
have problems accessing it...

Solution: use the module ip_nat_ftp (with ip_conntrack_ftp)

At 00.38 27/09/2001, you wrote:
>I've noticed a few people asking about getting their firewalls to let ftp
>connections work properly.
>Symptom: users can connect to ftp server, but can't receive directory
>listings or files.
>Problem: iptables allows traffic through on port 21, but not 20.
>Solution: Either set up iptables to accept traffic on port 20, or set up
>connection tracking and allow iptables to accept related and established
>connections.

Relevant Pages

  • Firewall issues with setting up vsftp server
    ... I am attempting to set up an ftp server on an internal network. ... hosts are 192.168.1.*) I am using vsftp, but stumbling over an iptables ... vsftp is running as a stand-alone daemon. ... again get the "no route to host" message when I try to transfer data. ...
    (Fedora)
  • Re: fetch / wget problem
    ... >I'm trying to write a script which gets a file from remote FTP server. ... >I think that firewalls are configured correctly, ... insists on using passive mode. ... Outgoing mail is certified Virus Free. ...
    (freebsd-questions)
  • Re: Ip tables and NAT
    ... iptables to secure a Ubuntu box? ... it is not necesary for you to configure iptables. ... way to open access to ftp for specified users is in the ftp server ... Rule #1: NAT is not firewalling. ...
    (Ubuntu)
  • Re: IPTables for FTP
    ... Richard Worwood wrote: ... > I'm trying to setup and ftp server which is protected with iptables and ... > am having a few probs with PASV mode and was wondering if anyone have a ... > sample iptables file I could have a look at. ...
    (Fedora)
  • fetch / wget problem
    ... I'm trying to write a script which gets a file from remote FTP server. ... The FTP username contains dots and this cannot be changed. ... I think that firewalls are configured correctly, ...
    (freebsd-questions)