vsftpd and iptables

Christopher K. Johnson ckjohnson at gwi.net
Wed Nov 12 02:54:32 UTC 2003


J. Scott Amort wrote:

>I'm experimenting with a Fedora Core 1 server, and so far, everything is
>running quite well.  However, there appears to be a change in the
>firewall rules that is causing a bit of a problem for vsftpd.  I ran
>redhat-config-securitylevel to allow for access through port 21, but the
>firewall is blocking passive connections.  I added port 20 as well, but
>that didn't seem to work.  What port do I need to open up?  Thanks for
>any help.
>
>Regards,
>
>Scott
>
>
>--
>fedora-list mailing list
>fedora-list at redhat.com
>http://www.redhat.com/mailman/listinfo/fedora-list
>
>
>  
>
On an ftp server which you want clients to be able to access via passive 
FTP be
sure to insmod ip_conntrack_ftp module, which can be accomplished by 
adding the
following two lines to /etc/modules.conf
 
# iptables module added for passive ftp access to ftpd on local system
above ip_conntrack ip_conntrack_ftp

-- 
-----------------------------------------------------------
   "Spend less!  Do more!  Go Open Source..." -- Dirigo.net
   Chris Johnson, RHCE #807000448202021






More information about the users mailing list