🚀 go-pugleaf

Greetings,

I've made a lot of progress on my RH6.0 / IPCHAINS firewall recently, but I
still struggle with the FTP portion.  The firewall has a public IP on one
side (eth0) and 192.168.1.1 (eth1) on the private side, with the FTP server
being 192.168.1.10.  Here is a snippet of my script, and ip_masq_ftp is in
fact loaded.  I have all the ports 1024:65535 enabled for full outgoing
access, from the 192.168.1.0 segment to the internet.  I attempted to add a
rule that enables port 20 to originate and go out, but that didn't fly
either.

I'm sure you folks have been asked this no less than 2106 times, but a week
of surfing didn't result in enough understanding on my part whereas I could
make this work.  Thanks in advance!



    #!/bin/sh
    IPCHAINS="/sbin/ipchains"
    REMOTENET="0/0"
    LOCALNET=$1
    # $1 is the public ip/subnet passed into the script.

     <snip>

    # ENABLE SPECIFIC SERVICES
    # ftp-data (20) and ftp (21)
    $IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 20 -j ACCEPT
    $IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 21 -j ACCEPT
    $IPMASQADM portfw -a -P tcp -L $LOCALIP 20 -R 192.168.1.10 20 -p 1
    $IPMASQADM portfw -a -P tcp -L $LOCALIP 21 -R 192.168.1.10 21 -p 1