Kernel Panic wrote:

> Hello I have those rules:
> 
> pchains -P forward DENY
> ipchains -A forward -j MASQ -s 10.0.1.0/24 -d 0.0.0.0/0
> ipchains -A input -j ACCEPT -p tcp -d 0.0.0.0/0 80
> 
> Clients can connect to ftp servers only en "passive" mode. Why?

Because you're not allowing the server to connect back to the client
(as happens in active mode).

NB: this is a non-issue. Nobody should be attempting to use
active-mode FTP nowdays.

-- 
Glynn Clements <[EMAIL PROTECTED]>

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to