How do I permit FTP connections on the following IPTables configuration....

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            ctstate RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:www 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:1111 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
DROP       all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination 
link|improve this question

feedback

1 Answer

up vote 2 down vote accepted

This is covered already

Check This Link

Try

 lsmod | grep ftp
 modprobe ip_conntrack_ftp
 lsmod | grep ftp

1st command should show nothing 3rd command should show something like..

ip_conntrack_ftp       41361  0 
ip_conntrack           91621  4 ip_conntrack_ftp,ipt_MASQUERADE,iptable_nat,ip_nat

Does this work??

link|improve this answer
/etc/sysconfig/iptables-config does not exist on my system, should I create it? help.ubuntu.com/community/IptablesHowTo doesn't say – Webnet Nov 8 '10 at 18:10
Just try 'modprobe ip_conntrack_ftp', it should load the module. I believe you can add ip_conntrack_ftp to /etc/modules to get it to load at boot...... Sorry different Linux distributions are a little different :) – Arenstar Nov 8 '10 at 18:38
@Arenstar: More recent kernels now call it nf_conntrack_ftp, but your advice is still good. – Steven Monday Nov 9 '10 at 2:12
Neither of those commands returned any result – Webnet Nov 11 '10 at 2:04
Ive updated my response – Arenstar Nov 11 '10 at 2:17
show 4 more comments
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.