On 06/21/2007 02:59 AM, Fajar Priyanto wrote: > On Thursday 21 June 2007 15:30, Hans Linux wrote: > >> i always have bad experience with my proftp server. i have it running >> but i can't transfr any data. Everytime it always stuck at "Entering >> passive mode" for a long time and then timeout. But if I disable the >> firewall, it works well. So which port of firewall should i open? I do >> some googling and find out port 30000-30050 or 60000-65535, but it >> didn't work. >> > > Hello Hans, > It's not your proftp's fault. > In passive mode, the ftp client will connect to the ftp server on tcp 21, > then > for data transfer it will open random high ports. In order to do this your > kernel must have ip_conntrack_ftp module loaded, so that it can 'track' the > connection for ftp. > > I believe you can set it in your firewall to load the needed module. > HTH, > Congratulations on the only correct answer so far :-)
As for loading ip_conntrack_ftp, that is done in the SuSEfirewall2 script, so the OP must be using some other firewall. -- Hypocrisy is the homage vice pays to virtue. -- François de La Rochefoucauld -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
