Hello all,

 

I’m having trouble allowing internal computers to access remote FTP sites on the net.   The new version of CUTE FTP can seem to connect ok.  But Internet Explorer gives an error “Invalid PORT command”.  And Bullet Proof FTP says it can’t open the socket.

 

 

Also, one other question.  Below is a section from my script.  I wrote most of my script from scratch but added this from another one that I found.  I notice that it slows down my internet a little.  Any ideas why?

 

# ICMP Control and Status Messages

 

# Log and drop initial ICMP fragments

iptables -A INPUT --fragment -p icmp -j LOG \

         --log-prefix "Fragmented incoming ICMP: "

iptables -A INPUT --fragment -p icmp -j DROP

 

iptables -A OUTPUT --fragment -p icmp -j LOG \

         --log-prefix "Fragmented outgoing ICMP: "

iptables -A OUTPUT --fragment -p icmp -j DROP

 

iptables -A FORWARD --fragment -p icmp -j LOG \

         --log-prefix "Fragmented forwarded ICMP: "

iptables -A FORWARD --fragment -p icmp -j DROP

 

iptables -A INPUT -p icmp \

         --icmp-type source-quench -d $NETIP -j ACCEPT

 

iptables -A OUTPUT -p icmp \

         --icmp-type source-quench -j ACCEPT

 

iptables -A FORWARD -p icmp \

         --icmp-type source-quench -j ACCEPT

 

iptables -A INPUT -p icmp \

         --icmp-type parameter-problem -j ACCEPT

 

iptables -A OUTPUT -p icmp \

         --icmp-type parameter-problem -j ACCEPT

 

iptables -A FORWARD -p icmp \

         --icmp-type parameter-problem -j ACCEPT

 

iptables -A INPUT -p icmp \

         --icmp-type destination-unreachable -j ACCEPT

 

iptables -A OUTPUT -p icmp \

         --icmp-type fragmentation-needed -j ACCEPT

 

iptables -A FORWARD -p icmp \

         --icmp-type fragmentation-needed -j ACCEPT

 

# Donšt log dropped outgoing ICMP error messages

iptables -A OUTPUT  -p icmp \

         --icmp-type destination-unreachable -j DROP

 

iptables -A FORWARD -o $NETFACE -p icmp \

         --icmp-type destination-unreachable -j DROP

 

 

thanks for any help.

 

 

Mark.

Reply via email to