On Wed, Aug 19, 2009 at 11:18:48AM +1000, Daniel Pittman wrote:
.
.
.
> > /etc/sysconfig/iptables
> 
> Hmmmm.  Does it have the nf_nat_ftp and nf_conntrack_ftp modules loaded, too?

Voytek,

Look in /etc/sysconfig/iptables-config for that.

> [...]
> 
> >>> Command:    PASV
> >>> Response:    227 Entering Passive Mode (116,197,145,51,175,75).
> >>>
> >>
> >> At this point the server *should* be expecting a connection from the
> >> client, on TCP/44875, but I bet the firewall isn't letting that through.
> >>
> >> Check your firewall logs first, to see if you have a record of blocking
> >> that connection or not.
> >
> > what log to look at?
> 
> I don't know, on RedHat.  I think they had /var/log/firewall or something?

They'll be in /var/log/messages


Bottom line, ftp is a pretty firewall un-friendly protocol.
I'd recommend sftp (i.e. the module/feature of ssh) instead.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to