Re: [CentOS] ftp firewall/iptables

On Thu, 2005-07-07 at 16:55 -0700, Dave wrote:

I just installed CentOS4 on my main server. It runs proftpd and is not NATted..

When I did the install I said to allow FTP and HTTP. I can ftp from windows dos ftp client.

In IE I get "Unable to build data connection: No route to host"

ncftp I get.. Data connection timed out. Falling back to PORT instead of PASV mode. List failed.

Wget and FireFox just time out.

Anything I need to add to the firewall rules? This is all it has related to FTP. -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT

You need to load the ip_conntrack_ftp.ko module.

You'll also need to open the ports for PASSV support. Some ftp servers let you pin those in the config.

Sean