[Fwd: Firewall ( iptables ) enabled for ftp ( active mode & passive mode ) problem]

[Edward. S. P. Leong]

Hello,

[root at host1 ~]# lsmod|grep ftp
[root at host1 ~]#

Output is nothing

And:

[root at host1 ~]# iptables -A INPUT -i eth1 -m nf_conntrack_ftp -p tcp
--dport 21 -d 192.168.1.254 -j ACCEPT
iptables v1.4.3.1: Couldn't load match
`nf_conntrack_ftp':/lib/xtables/libipt_nf_conntrack_ftp.so: cannot open
shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
[root at host1 ~]#

No of the modules can't be loaded...

Any other help ?

Thanks !

jkk at csk.umed.lodz.pl wrote:

>What is output from command:
>lsmod|grep ftp
>
>module nf_conntrack_ftp is a must for passive mode
>
>Dnia 27 Marca 2010, 09:42, So, Edward. S. P. Leong napisa?(a):
>  
>
>>ftp client ( passive mode ) :
>>227 Entering Passive Mode (192,168,1,254,226,220).
>>connecting to 192.168.1.254:58076
>>- -
>>connecting to 192.168.1.254:58076
>>! Connection failed 192.168.1.254 - connection timed out
>>! connect: error 0
>>PORT 192,168,1,101,17,247
>>200 PORT command successful
>>LIST
>>150 Opening ASCII mode data connection for file list
>>Received 61 bytes in 0.1 secs, (6100.00 bps), transfer succeeded
>>226 Transfer complete
>>
>>-------- Original Message --------
>>Subject: 	Firewall ( iptables ) enabled for ftp ( active mode & passive
>>mode ) problem
>>Date: 	Sat, 27 Mar 2010 16:39:01 +0800
>>From: 	Edward. S. P. Leong <edwardspl at ita.org.mo>
>>To: 	fedora-list at redhat.com <fedora-list at redhat.com>,
>>proftp-user at lists.sourceforge.net
>>
>>
>>
>>Dear All,
>>
>>Mine is FC11 OS...
>>So, how can we enable the firewall ( iptables ) for using ftp ( active
>>mode & passive mode ) service ?
>>
>>For the existing setting :
>>iptables -F
>>iptables -X
>>iptables -F -t nat
>>iptables -X -t nat
>>iptables -F -t mangle
>>iptables -X -t mangle
>>
>>iptables -P INPUT DROP
>>iptables -P OUTPUT ACCEPT
>>iptables -P FORWARD ACCEPT
>>iptables -t nat -P OUTPUT ACCEPT
>>iptables -t nat -P PREROUTING ACCEPT
>>iptables -t nat -P POSTROUTING ACCEPT
>>iptables -t mangle -P PREROUTING ACCEPT
>>iptables -t mangle -P POSTROUTING ACCEPT
>>iptables -t mangle -P INPUT ACCEPT
>>iptables -t mangle -P OUTPUT ACCEPT
>>iptables -t mangle -P FORWARD ACCEPT
>>
>>iptables -A INPUT -i lo -j ACCEPT
>>iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>>
>>int="eth1"
>>int_add="192.168.1.254"
>>int_src="192.168.1.0/24"
>># Only allow users to use port 22 ( ssh services ) :
>>iptables -A INPUT -i $int -p tcp --dport 22 -s $int_src -d $int_add -j
>>ACCEPT
>># Only allow users to use port 20 & 21 ( ftp services ) :
>>iptables -A INPUT -i $int -p tcp --dport 20 -s $int_src -d $int_add -j
>>ACCEPT
>>iptables -A INPUT -i $int -p tcp --dport 21 -s $int_src -d $int_add -j
>>ACCEPT
>># ping ( ICMP )
>>iptables -A INPUT -i $int -p icmp --icmp-type echo-request -s $int_src
>>-d $int_add -j ACCEPT
>>
>>Problem of ftp client :
>>connection timenout
>>
>>Thanks !
>>
>>Edward.
>>
>>
>>--
>>users mailing list
>>users at lists.fedoraproject.org
>>To unsubscribe or change subscription options:
>>https://admin.fedoraproject.org/mailman/listinfo/users
>>Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>>
>>    
>>
>
>  
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/users/attachments/20100327/42994fe9/attachment.html