6 responses to “Iptables w/ Proftpd”

1. 

   Oliver Demetz

   July 10, 2005

   NOTE: ****IMPORTANT****
   if proftp still does not work, then insert

   UseReverseDNS off

   into your proftpd.conf!!!
   It’s because if you chroot your users with sth. like “Default Root ~”, the /etc/hosts file won’t be visible for proftp anymore, so it will hang up on reverseLookups!

2. 

   Greg Forrest

   September 27, 2005

   When I enter this, there seems to a problem with the -dport 60150:60200 part. Oops. I just noticed there is two dashes there. Just pointing it out for anyone else that might not be as observant as me. 🙂

3. 

   Greg Forrest

   September 27, 2005

   I forgot to say Thanks! This was exactly what I was looking for. Active mode now works for me.

   I have one more problem though. When I login using Pasv mode, it hangs on LIST. Any idea why?

4. 

   nullmind

   September 27, 2005

   This should make PASV mode work, post here your iptables config

5. 

   Greg Forrest

   September 28, 2005

   Here it is. The server is behind a router and I set the router to forward ports 60150-60200, 21, 80, and 22 to my local ip of 192.168.2.101. I’m new to iptables (and linux administering) so there are probably better setups to use than what I have here.

   iptables -L
   Chain INPUT (policy ACCEPT)
   target prot opt source destination
   ACCEPT tcp — anywhere anywhere tcp dpts:60150:6020
   0
   ACCEPT tcp — anywhere anywhere tcp dpt:http
   ACCEPT tcp — anywhere anywhere tcp dpt:ssh
   ACCEPT tcp — anywhere anywhere tcp dpt:ftp

   Chain FORWARD (policy ACCEPT)
   target prot opt source destination

   Chain OUTPUT (policy ACCEPT)
   target prot opt source destination

6. 

   nullmind

   October 16, 2005

   try adding

   ACCEPT tcp — anywhere anywhere tcp spts:60150:6020

   I believe thats the string for S port

   other than that, I would have no idea 🙁