[CentOS] ftp firewall/iptables

Fri Jul 8 00:00:17 UTC 2005
Sean O'Connell <oconnell at soe.ucsd.edu>

On Thu, 2005-07-07 at 16:55 -0700, Dave wrote:
> I just installed CentOS4 on my main server. It runs proftpd and is not NATted..
> 
> When I did the install I said to allow FTP and HTTP. I can ftp from
> windows dos ftp client.
> 
> In IE I get "Unable to build data connection: No route to host"  
> 
> ncftp I get.. 
> Data connection timed out.
> Falling back to PORT instead of PASV mode.
> List failed.
> 
> Wget and FireFox just time out.
> 
>  Anything I need to add to the firewall rules? This is all it has
> related to FTP.
> -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT


You need to load the ip_conntrack_ftp.ko module.

You'll also need to open the ports for PASSV support. Some ftp servers
let you pin those in the config.

Sean