up vote 0 down vote favorite
share [g+] share [fb]

I've seen a few examples online... but what rules do you guys use in live environments to control your FTP usage? Basic usage, nothing special, but I hear I need to be able to support active ftp sessions.

link|improve this question
90% accept rate
feedback

1 Answer

up vote 0 down vote accepted

Here's a basic setup:

iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

Also need to tell iptables to load the kernel module that tracks FTP connections in /etc/sysconfig/iptables-config:

IPTABLES_MODULES="ip_conntrack_ftp"
link|improve this answer
where would I add the IPTABLES_MODULES part ? To my rules file? – Webnet Oct 14 '10 at 20:47
No, it goes in /etc/sysconfig/iptables-config file – coldcache Oct 15 '10 at 14:10
I don't have an iptables-config file anywhere. I'm running ubuntu – Webnet Oct 18 '10 at 2:07
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.