On Tue, 2 Apr 2013, Reindl Harald wrote:

Am 02.04.2013 01:25, schrieb Max Pyziur:

...

On Tue, 2 Apr 2013, Reindl Harald wrote:

...

Am 02.04.2013 01:12, schrieb Max Pyziur:

...

Beginning today, I started to receive the following when ftp'ing to my CentOS 6 machine: ncftp /home/pyz2 > dir connect failed: No route to host. connect failed: No route to host. connect failed: No route to host. Falling back to PORT instead of PASV mode.

I can make a connection, but I can't get a directory listing or transfer data/files

My firewall setting has port 21 open

I can remotely telnet to hostname 21

and you understood that ftp needs also a data-channel and not only the control-connection?

I assume that you are referring to the following vsftpd configuration file setting: # Make sure PORT transfer connections originate from port 20 (ftp-data). connect_from_port_20=YES

no - port 20 has NOTHING t do with passive FTP

...

Btw, When ftping to another user on the same machine, there is no problem in making a connection or in transferring data

beause it is nor firewalled nor NAted

...

it's connections that our outside the box.

i bet you are behind a nat

iptables or the firewall needs to translate he answers of the servers you need to read some documentations how FTP works and how NAT works to undersatdn the details

Ok.

[root@srv-rhsoft:~]$ cat /etc/sysconfig/iptables-config # Load additional iptables modules (nat helpers) # Default: -none- # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which # are loaded after the firewall rules are applied. Options for the helpers are # stored in /etc/modprobe.conf. IPTABLES_MODULES="nf_conntrack_ftp nf_nat_ftp"

So, are you saying this last line is key?

Because on the CentOS 5 setup I see: IPTABLES_MODULES="ip_conntrack_netbios_ns ip_conntrack_ftp"

While on the CentOS 6 setup I see: IPTABLES_MODULES=""

What is the correct/recommended setting?

...

...

http://slacksite.com/other/ftp.html

Max Pyziur pyz@brama.com