Re: iptables question for the experts

2006-07-19 Thread Dan Coutu
Ben, thanks for the script! It turns out that some modules were installed but the lack of ip_conntrack_ftp.ko being installed made all the difference! I hadn't realized that iptables could have kernel module dependencies, I learned something new! Dan

Re: iptables question for the experts

2006-07-18 Thread Ben Scott
On 7/17/06, Dan Coutu [EMAIL PROTECTED] wrote: I am expecting that following line opens traffic to the remote server on whatever port passive mode ftp chooses to use: Are these iptables rules on the FTP client, or the FTP server? I will assume the FTP server. I'll also assume 64.39.2.176

Re: iptables question for the experts

2006-07-18 Thread Steven W. Orr
On Tuesday, Jul 18th 2006 at 07:09 -0400, quoth Ben Scott: =On 7/17/06, Dan Coutu [EMAIL PROTECTED] wrote: = I am expecting that following line opens traffic to the remote server on = whatever port passive mode ftp chooses to use: = = Are these iptables rules on the FTP client, or the FTP server?

Re: iptables question for the experts

2006-07-18 Thread Ben Scott
On 7/18/06, Steven W. Orr [EMAIL PROTECTED] wrote: Also, don't you need to have ip_conntrack loaded to deal with ftp?x Various modules definitely need to be loaded. What I'm not sure about is which ones are loaded automatically by the kernel/iptables and which ones need to be loaded

Re: iptables question for the experts

2006-07-18 Thread Chris Brenton
On Mon, 2006-07-17 at 18:19 -0400, Dan Coutu wrote: I am expecting that following line opens traffic to the remote server on whatever port passive mode ftp chooses to use: eeek! Scary rules. ;-p Just to verify, these are the rules on the client which is connecting to the server, correct? If

Re: iptables question for the experts

2006-07-18 Thread Chris Brenton
On Tue, 2006-07-18 at 15:26 -0400, Chris Brenton wrote: iptables -A OUTPUT -p tcp -d server ip --dport 25 -j ACCEPT Dooh! Change that to be: iptables -A OUTPUT -p tcp -d server ip --dport 21 -j ACCEPT ___ gnhlug-discuss mailing list

Re: iptables question for the experts

2006-07-18 Thread Dan Coutu
Chris Brenton wrote: On Mon, 2006-07-17 at 18:19 -0400, Dan Coutu wrote: I am expecting that following line opens traffic to the remote server on whatever port passive mode ftp chooses to use: eeek! Scary rules. ;-p Just to verify, these are the rules on the client which is

iptables question for the experts

2006-07-17 Thread Dan Coutu
I'm trying to troubleshoot what seems like it ought to be a simple iptables configuration. Here's the goal here: The server has a cron job that periodically uses ftp to fetch from a remote server an updated script to be used for doing backups. ftp is configured to use passive mode. I am