[CentOS] iptables question

Thu Sep 20 19:35:00 UTC 2007
Ray Leventhal <centos at swhi.net>

Fabian Arrotin wrote:
> On Thu, 2007-09-20 at 14:55 -0400, Ray Leventhal wrote:
>   
>> Hi all,
>>
>> With SELinux in permissive mode and iptables running, I'm unable to
>> retrieve directory listings with ftp.
>>
>> stop iptables, and all appears again.  This seems to be unrelated to
>> passive/port modes for ftp client.
>>     
>
> Depending how you configured your iptables rules, you'll probably anyway
> need the ip_conntrack_ftp iptables module.
> You can modprobe it, or even better, declare it
> in /etc/sysconfig/iptables-config ...
>   
Thanks, Fabian.  I'll have at the iptables-config

~Ray