Re: iptables script doesn't allow ftp data to circulate

From: ynotssor ("ynotssor")
Date: 01/12/04 

Date: Sun, 11 Jan 2004 15:49:25 -0800

"charly" <kanarispam666@yahoo.fr> wrote in message
news:btskmv$s9i$1@news-reader2.wanadoo.fr

> But this means that all ports on my box 1024-65535 are open to the
> outside world ??
> seems a bit risky to me isnt't it ?

Since you have

    -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

then

    /sbin/insmod ip_conntrack_ftp

will only allow related connections.

        tony 

-- 
use hotmail for any email replies
-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----==  Over 100,000 Newsgroups - 19 Different Servers! =-----
Quantcast