Skip to contentSkip to conversation

Yet another FTP connection problem

DISCUSSION Erik Pagel 1 participant 1 message Jun 6, 2002

lore
Share & tools
lore

Erik Pagel

author
#0 lore raw

Hi,

there seems to be a problem within my FTP rules. I'm not able to make any ftp connection. I'm able to send but not to recevie any package.
Maybe someone can point me to my mistake.

iptables -N ftp
#No incomming connections, only outgoing and only in PASV mode.
iptables -A ftp -p tcp --dport 20:21 -o $I_EXTERN -j ACCEPT
iptables -A ftp -p tcp --sport 20:21 -i $I_EXTERN -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A ftp -p tcp --dport 20:21 -i $I_EXTERN -m state --state NEW,INVALID -j LOG --log-level warning --log-prefix "DROP:FTP Incomming" iptables -A ftp -p tcp --dport 20:21 -i $I_EXTERN -m state --state NEW,INVALID -j DROP
iptables -A INPUT -j ftp
iptables -A OUTPUT -j ftp
iptables -A FORWARD -j ftp

all I get after some tries to establish a connection from my firewall to ftp.funet.fi:

iptables -v -L ftp

pkts bytes target prot opt in     out   source    destination
  20  1200 ACCEPT tcp  --  any    ppp+  anywhere  anywhere  tcp 

dpts:ftp-data:ftp
0 0 ACCEPT tcp -- ppp+ any anywhere anywhere tcp
spts:ftp-data:ftp state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state RELATED,ESTABLISHED
0 0 LOG tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state INVALID,NEW LOG level warning prefix `DROP:FTP Incomming'
0 0 DROP tcp -- ppp+ any anywhere anywhere tcp
dpts:ftp-data:ftp state INVALID,NEW
--------------------------

Thanks in advance
Erik Pagel