Iptables creates ftp problem

From: B H (check4junk_at_gmail.com)
Date: 12/15/04 

Date: Wed, 15 Dec 2004 10:09:31 +0100

I've had some ftp-problems with my Linux-box (fedora core 3) when
connecting to a Windows ftp server at my isp which requires active
mode. The ftp session freezez after loging when I try to do e.g. a LIST
command.
I have had some problems identifying the source of the error, but last
night I shut off the local firewall by using "iptables stop" command.
After this I could ftp without problems.

My Linux-box is behind a router with firewall. The router is doing local
DHCP. Maybe this could be the source of my problem? I have another
Windows XP box on the same LAN, and it can ftp to the same server
without problems (both pc's are set to active mode so this is not the
problem).
So there must be some problems with my iptables settings. Any experts
out there that can shed some lights on the possible problem? See below.

===== "Iptables -L" as root ==============
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT ipv6-crypt-- anywhere anywhere
ACCEPT ipv6-auth-- anywhere anywhere
ACCEPT udp -- anywhere 224.0.0.251 udp dpt:5353
ACCEPT udp -- anywhere anywhere udp dpt:ipp
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:ftp
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:ssh
REJECT all -- anywhere anywhere reject-with
icmp-host-prohibited

===============================
Borge

Relevant Pages

  • Iptables creates ftp problem
    ... connecting to a Windows ftp server at my isp which requires active ... The ftp session freezez after loging when I try to do e.g. a LIST ... My Linux-box is behind a router with firewall. ... Chain FORWARD ...
    (comp.os.linux.networking)
  • Iptables creates ftp problem
    ... connecting to a Windows ftp server at my isp which requires active ... The ftp session freezez after loging when I try to do e.g. a LIST ... My Linux-box is behind a router with firewall. ... Chain FORWARD ...
    (linux.redhat)
  • Re: ftp & ipchains: using the chains approach this time
    ... That should make ftp work. ... > i *do not* want to open all udp ports above 1023 ... > Chain forward: ... > Chain icmp-acc (1 references): ...
    (comp.os.linux.security)
  • Re: blocking ports 1:1024
    ... do you have restrictions in the OUTPUT chain? ... > to act as a ftp client, you must allow outbound ftp. ... > all packets will be dropped - including those from the localhost. ...
    (comp.os.linux.networking)
  • Re: blocking ports 1:1024
    ... >> outgoing ones, but these are usually for ports beyond 1024. ... do you have restrictions in the OUTPUT chain? ... to act as a ftp client, you must allow outbound ftp. ... all packets will be dropped - including those from the localhost. ...
    (comp.os.linux.networking)
Loading