IPCHAINS & FTP

Thread View: linux.redhat.misc

4 messages

[T] Back to Threads [V] Tree View [G] Group Articles

4 total messages Started by Frederic Breitwieser Thu, 13 Apr 2000 00:00

#14

Author: Frederic Breitwieser
Date: Thu, 13 Apr 2000 00:00

31 lines
1998 bytes

Greetings,

I've made a lot of progress on my RH6.0 / IPCHAINS firewall recently, but I
still struggle with the FTP portion.  The firewall has a public IP on one
side (eth0) and 192.168.1.1 (eth1) on the private side, with the FTP server
being 192.168.1.10.  Here is a snippet of my script, and ip_masq_ftp is in
fact loaded.  I have all the ports 1024:65535 enabled for full outgoing
access, from the 192.168.1.0 segment to the internet.  I attempted to add a
rule that enables port 20 to originate and go out, but that didn't fly
either.

I'm sure you folks have been asked this no less than 2106 times, but a week
of surfing didn't result in enough understanding on my part whereas I could
make this work.  Thanks in advance!



    #!/bin/sh
    IPCHAINS="/sbin/ipchains"
    REMOTENET="0/0"
    LOCALNET=$1
    # $1 is the public ip/subnet passed into the script.

     <snip>

    # ENABLE SPECIFIC SERVICES
    # ftp-data (20) and ftp (21)
    $IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 20 -j ACCEPT
    $IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 21 -j ACCEPT
    $IPMASQADM portfw -a -P tcp -L $LOCALIP 20 -R 192.168.1.10 20 -p 1
    $IPMASQADM portfw -a -P tcp -L $LOCALIP 21 -R 192.168.1.10 21 -p 1

Re: IPCHAINS & FTP

#15

Author: Rick Matthews
Date: Thu, 13 Apr 2000 00:00

18 lines
1331 bytes

[posted and mailed]

Frederic Breitwieser <frederic@xephic.dynip.com> wrote:

>Greetings,
>
>I've made a lot of progress on my RH6.0 / IPCHAINS firewall
>recently, but I still struggle with the FTP portion. 

You'll find these to be helpful:

http://www.linux-firewall-tools.com/linux/

and more importantly this one:

http://www.linux-firewall-tools.com/linux/firewall/index.html

That last link will build it for you with the services that you specify.

Re: IPCHAINS & FTP

#16

Author: Frederic Breitwieser
Date: Sun, 16 Apr 2000 00:00

17 lines
1364 bytes

> http://www.linux-firewall-tools.com/linux/firewall/index.html
> That last link will build it for you with the services that you specify.

Thank you for the lead(s) Rick... I have everything working but the FTP
now.  I think I have the !-y's in the wrong place :)


-- 

Frederic Breitwieser
Xephic Technology
769 Sylvan Ave #9
Bridgeport CT 06606

Tele: (203) 372-2707
 Fax: (603) 372-1147
Web: http://xephic.dynip.com/

Re: IPCHAINS & FTP

#17

Author: Rick Matthews
Date: Sun, 16 Apr 2000 00:00

12 lines
1302 bytes

Frederic Breitwieser <frederic@xephic.dynip.com> wrote:

>> http://www.linux-firewall-tools.com/linux/firewall/index.html
>> That last link will build it for you with the services that you
>> specify. 
>
>Thank you for the lead(s) Rick... I have everything working but the
>FTP now.  I think I have the !-y's in the wrong place :)

Glad I could help!

Rick

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads