On 12/1/05, James Pifer jep@obrien-pifer.com wrote:
I have a server that is running iptables. I'm trying to allow vsftpd in and have the following rules. I can connect to it, but when I try to do a listing it says "Entering Passive Mode" but doesn't do anything.
Any suggestions?
Thanks, James
# define it -N FTP_INP -A INPUT -p tcp --syn --sport 1024: --dport 21 -m state --state NEW -j FTP_INP
# rules -A FTP_INP -j ACCEPT
# go back -A FTP_INP -j RETURN
-N FTP_OUT -A OUTPUT -p tcp --sport 1024: --dport 21 -m state --state NEW -j FTP_OUT -A FTP_OUT -j ACCEPT -A FTP_OUT -j RETURN
A few things for you to investigate:
in your vsftpd.conf file pasv_max_port pasv_min_port
In your /etc/sysconfig/iptables-config conntrack (connection tracking)
basically ftp doesn't stay on port 21. These few things will let you get it under control and slap it around. -- Jim Perrin System Architect - UIT Ft Gordon & US Army Signal Center