[ LUGOS ] FTP in firewall

[David Delibasic]

Howdy !

Na eni masini (xxx.xxx.xxx.xxx) imam nastavljen firewall: 

Allow tcp from anywhere to xxx.xxx.xxx.xxx 21:
ipchains -A input -s any/0 -d xxx.xxx.xxx.xxx 21 -p tcp -j ACCEPT

Allow tcp from anywhere to xxx.xxx.xxx.xxx 20:
ipchains -A input -s any/0 -d xxx.xxx.xxx.xxx 20 -p tcp -j ACCEPT

Deny tcp from anywhere to xxx.xxx.xxx.xxx setup:
ipchains -A input -s any/0 -d 164.8.70.227 -y -j DENY

Torej...zadnja vrstica denaya vse kar poskusa vzpostaviti
povezavo...ostalo pa spusti skoz...

Pol se pa ftpjam na to masino (xxx.xxx.xxx.xxx)

pa dobim:

ncftp / > dir
Data connection timed out.
Falling back to PORT instead of PASV mode.


So porti ki jih uporablja "Passive FTP" doloceni da jih lahko odprem oz.
kako resiti priblem da bo delal passive mode FTP na to masino ???

lp, MadDave  

----------------------------------------------------------------------
|Unix is like a wigwam -- no Gates, no Windows, and an Apache inside.|
----------------------------------------------------------------------
| > FreeBSD < - > Power to SERVE <                                   |
----------------------------------------------------------------------
| Line noise provided by Telekom Slovenija                           |
----------------------------------------------------------------------