SuSEfirewall2: FTP not working!?

Article View: alt.os.linux.suse

Article #184

#184

From: alex
Date: Wed, 28 Nov 2001 22:11

20 lines
2296 bytes

hi

i'v configged the SuSEfirewall2 version 1.7 and 2.0... i've used the same
config file and cannot get the ftp working :-(((.

i cannot connect from dmz to the internet servers... or bedder to say the
connection (ftp) will work and the ftp-data will not work! i've looked
inside the /var/log/messages... on a passiv connect i see the DROPed connect
coming from a source highport and goes out on destination highport... looks
ok - but was DROPed???! The Option FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes" is
set. and the FW_FORWARD="210.104.1.12,0/0,tcp,ftp" is set, too. i've playing
around with active ftp, but cannot get this worked, too... for active i've
changed FW_FORWARD="210.104.1.12,0/0,tcp,ftp 210.104.1.12,0/0,tcp,ftp-data".
In this config i can see the DROPed incoming connection came from source
port 20 (ftp-data) and goes to a destination highport... looks all ok - but
why is this droped??? i don't realy want to do active ftp... passive ftp
will be fine for us... but how to configure???


Alex

Technical Details

Message-ID: <9u3nfh$6di$05$1@news.t-online.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!nntp-relay.ihug.net!ihug.co.nz!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1041dd,992688f38e4df91a,start
X-Google-Attributes: gid1041dd,public
X-Google-Thread: f4b73,992688f38e4df91a,start
X-Google-Attributes: gidf4b73,public
X-Google-Thread: 10669a,992688f38e4df91a,start
X-Google-Attributes: gid10669a,public
X-Google-ArrivalTime: 2001-11-28 14:13:03 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!nntp-relay.ihug.net!ihug.co.nz!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.com!t-online.de!news.t-online.com!not-for-mail
From: "alex" <ntnewsNOSPAM@hrz3.hrz.tu-darmstadt.de>
Newsgroups: alt.os.linux.suse,ch.comp.os.linux,comp.os.linux.networking
Subject: SuSEfirewall2: FTP not working!?
Date: Wed, 28 Nov 2001 23:11:46 +0100
Organization: T-Online
Lines: 23
Message-ID: <9u3nfh$6di$05$1@news.t-online.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: news.t-online.com 1006985522 05 6578 PYSlTymSS8Aazv 011128 22:12:02
X-Complaints-To: abuse@t-online.com
X-Sender: 520078324419-0001@t-dialin.net
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000