0
votes
0answers
35 views

FTP Traffic routing through NAT prevents me from logging in

I need to send all FTP traffic to a particular server from a NAT. Server A connects via FTP to an IP which is routed to the NAT and then over a VPN. That traffic then comes back and gets routed from ...
0
votes
0answers
320 views

iptables/netfilter (nf_ct_ftp) drops ftp packets

I have a strange problem. netfilter (the module nf_ct_ftp) drops packet from one of my ftp client. But it happens only with this client (91.xxx.xxx.170), all others clients (about 100) are working ...
1
vote
2answers
131 views

Limit FTP client ports?

Okay so I use the simple linux ftp client to download/upload files off ftp servers. I have an iptables firewall which blocks most of the ports and I have to close the firewall for it to work. Although ...
1
vote
2answers
337 views

iptables 1.4 and passive FTP on custom port

after the upgrade from debian squeeze to wheezy I've got a problem with passive FTP connection. I could narrow it to be iptables related, as I could connect via FTP w/o problems after adding my IP to ...
0
votes
0answers
519 views

FTP not listing files behind firewall (setsockopt (ignored): Permission denied)

We are developing a Magento application that has a module that works with FTP. Today we deployed this on the testing environment which is setup in the following way: Gateway server which has the ...
0
votes
1answer
201 views

Blocking port 21 causes outgoing FTP to fail

I recently migrated our server away from using FTP to exclusively SFTP. I would like to block port 21 in the firewall now that it is not needed for incoming FTP connections. However, when I did ...
0
votes
2answers
251 views

With PureFTPd, Passive mode doesn't work if I don't accept new connections in iptables

I configured Pure-FTPd-MySQL + IPTables but I have a problem with Passive mode (who doesn't?) I forced this port range: echo "1024 65535" > /etc/pure-ftpd/conf/PassivePortRange In Iptables, a ...
1
vote
2answers
761 views

limit upload/download speed per IP in Cpanel

I have some abusers on FTP which suck all my 100MBs on the server. How I could stop that from Cpanel or iptables or something else?
2
votes
1answer
133 views

Traffic statistics with iptables for passive FTP?

Basic traffic statistics with iptables are easy. One creates a rule with no target, e.g. iptables -I INPUT -p tcp --dport 80 Then, e.g. after uploading some data via http, one can read the counters ...
3
votes
1answer
245 views

Iptable config for cPanel FTP - Centos 6.2

I would like to open the FTP port in my iptables. The following is my config for iptables: #!/bin/sh IPT="/sbin/iptables" # Flush old rules, old custom tables $IPT --flush $IPT --delete-chain # ...
0
votes
1answer
104 views

Blocking FTP access with iptables

I am trying to set up iptables to log connection attempts to port 21 on a server, then deny the connection. The logging works, but I can't get iptables to actually reject the connection or drop the ...
3
votes
3answers
3k views

Using FTPS (FTP over explicit TLS/SSL) with active ftp?

I am using vsftpd with active ftp. I have module "ip_conntrack_ftp" (in /etc/sysconfig/iptables-config) on and port 21 is open. Connecting with FTP works, but FTPS doesn't. I can login but get no ...
0
votes
1answer
313 views

how to make curl uploads faster with firewall

We recently moved a new server and are facing the slow upload issues . We suspect this because of firewall . how do I make sure applications like ftp,curl become faster with firewall. Any inputs ...
1
vote
2answers
4k views

How to get Passive FTP Working Through an Iptables Firewall?

I have an iptables firewall running on a Fedora Linux server that is basically being used as a firewall router and OpenVPN server. That's it. We have been using the same iptables firewall code for ...
2
votes
3answers
153 views

slow ftp session

I am running ProFTPD Version 1.3.3c in active ftp mode and have the following firewall rules. But whenever, I do directory listing, it is too slow. It takes time, but directory and files get listed. ...
2
votes
1answer
1k views

FTP not showing files or directories

I'm able to log into FTP but I'm not seeing any files or folders. My iptables looks like this -A INPUT -p udp -m udp --dport ftp-data -j ACCEPT -A INPUT -p udp -m udp --dport ftp -j ACCEPT -A INPUT ...
1
vote
2answers
146 views

Troubleshooting FTP traffic not getting through

I have recently set up vsftpd and whilst everything appears to be running fine and the server is listening on the correct port I cannot connect in using FTP clients. A connection is established but ...
0
votes
1answer
617 views

Iptables : Allowing FTP access only to one host?

I'm totally new to iptables but I need it to allow only ftp access to ftp.mywebsite.com, and refuse the ftp connection to other domain/ip (by closing the port?). Is this possible? how can I do that? ...
5
votes
2answers
3k views

Forward FTP with IPTables

I'm trying to forward an FTP-server with IPTables. The FTP-Server is running on a Windows 2008 box (Cerberus). Details Win Box: IP: 192.168.220.51 FTP-Port: 21 PASV-Ports: 11000-13000 The ...
0
votes
1answer
261 views

Error when trying to start iptables

I have tried to install vsftpd and I added this line to my iptables: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT However, when I start iptables. I get the ...
1
vote
3answers
8k views

Setting up Linux iptables for FTP PASV mode connections

I've been doing numerous searches and have learned a little every time but have not found the solution to my problem. I have vsftpd setup, using SSL/TLS ive got it working as I needed, but am unable ...
1
vote
4answers
3k views

iptables lets me connect by FTP but I can't get dir listing [duplicate]

Possible Duplicate: Allowing FTP with IPTables I have a pretty restrictive set of iptables rules with the following rule that allows me to connect by ftp iptables -A INPUT -p tcp --dport ...
0
votes
4answers
1k views

Client Side IPTABLES rule to allow active ftp

What iptables rules do I need client side to allow active ftp. I currently unable to connect to ftp via active mode when iptables is running, however if I stop IPTABLES everything works fine. Passive ...
1
vote
3answers
366 views

ftp tls firewalled :(

My FTP(s) isn't working when my firewall is enabled. I have always had my iptables set up for me in the past, I learnt roughly how to set one up yesterday, but I've missed a rule that this requires. ...
2
votes
3answers
2k views

Can I Use iptables rate limiting to temporarily block FTP server brute-force attempts?

This is along a similar line to other posts on brute-force attacks, but a bit more specific: We are able to enforce decent passwords, generally, and user name policy also avoids falling prey to what ...
0
votes
1answer
663 views

Forward FTP to another server using iptables

My setup is: FTP client -> proxy server (eth0: external, eth1: internal) -> FTP server (eth1:internal) I'm trying to forward all FTP traffic from the proxy server on eth0 to the FTP server on ...
1
vote
3answers
560 views

Debian Blocked IP's

I am debugging access to a remote service via. my Debian VPS. IPTables is used and allows outward port 21 traffic. The remote service is an FTP server (which I can access from my own PC and is not ...
0
votes
2answers
154 views

Unable to login via FTP unless shell is enabled

I'm trying to set up FTP access on a Debian box running Apache. Creating an FTP user via useradd works over port 22... but only if I don't restrict shell access via -s /dev/null. I've got vsftpd ...
0
votes
2answers
619 views

Allow curlftpfs though iptables firewall, how?

I'v allowed FTP ports 21 and 20 which then allows me to connect to my FTP server via "ftp" command, but I still can't get curlftpfs to work. What ports does curlftpfs all use? Or is their something ...
2
votes
1answer
3k views

Impossible to connect to VSFTPD from distant server

My FTP server is a CentOS 5.4 with VSFTPD. When I try to ls after connecting to my server using FTP I get this : ftp> ls 229 Entering Extended Passive Mode (|||12206|) ftp: Can't connect to ...
0
votes
4answers
488 views

Can't connect to CentoOS server via Active FTP

I'm unable to connect to my CentOS server via Active FTP. I've installed and started vsftpd. I've loaded the ftp connection tracking module (/sbin/modprobe ip_conntrack_ftp). Here is the output ...
0
votes
1answer
148 views

FTP connection hanging on 200 Welcome to blabla FTP services

I am having problems when connecting to a remote ftp server that is running on UNIX.When I try to coonect it freezes on the welcome screen and it dos=esnt prompt for password and username. Connected ...
13
votes
2answers
25k views

Allowing FTP with IPTables

My current scenario involves allowing various rules, but I need ftp to be accessible from anywhere. The OS is Cent 5 and I am using VSFTPD. I can't seem to get the syntax correct. All other rules ...