On Thu, August 20, 2009 10:37 am, Matthew Hannigan wrote:
> On Wed, Aug 19, 2009 at 11:18:48AM +1000, Daniel Pittman wrote:

>>> /etc/sysconfig/iptables
>>>
>>
>> Hmmmm.  Does it have the nf_nat_ftp and nf_conntrack_ftp modules
>> loaded, too?

> Look in /etc/sysconfig/iptables-config for that.

Matt,
thanks, no modules specfied

so I should add IPTABLES_MODULES="nf_nat_ftp nf_conntrack_ftp"

-----------------------------
IPTABLES_MODULES=""
IPTABLES_MODULES_UNLOAD="yes"
IPTABLES_SAVE_ON_STOP="no"
IPTABLES_SAVE_ON_RESTART="no"
IPTABLES_SAVE_COUNTER="no"
IPTABLES_STATUS_NUMERIC="yes"
----------------------------

>> I don't know, on RedHat.  I think they had /var/log/firewall or
>> something?
>
> They'll be in /var/log/messages

> Bottom line, ftp is a pretty firewall un-friendly protocol.
> I'd recommend sftp (i.e. the module/feature of ssh) instead.


but, if command line ftp client works with no issues, doesn't that exclude
firewall on the server ?

the ftpd and fwall have been unmodified pretty well since 1st installed


-- 
Voytek

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to