Mailinglist Archive: opensuse (868 mails)

< Previous Next >
Re: [opensuse] What is the currently recommented firwall settings recommended for FTP?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2011-05-02 21:12, Dimstar / Dominique Leuenberger wrote:
On Mon, 2011-05-02 at 20:49 +0200, Carlos E. R. wrote:

On the server, you'd need something like:
192.168.1.0/24,tcp,ftp 102.168.1.0/24,tcp,ftp-data
Yes, that's what I have.

Together with the conntrack module, this should get you going.
(192.168.1.0/24 are the machines in the network, that are allowed to
reach your server)

Yes, but it doesn't. I had to explicitly open the data ports the server
uses (see the other post). The conntrack module only works for plain
passive mode, not for the extended passive mode. I don't know if that is
intentional or a bug.

- --
Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 "Emerald" at Telcontar)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAk2/BkQACgkQtTMYHG2NR9XmEwCgmDAAWCG/5bznlm95bD5e29Nh
588AniBHUPgA4gDYNj/YpHw06LxKDas6
=rUBu
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
List Navigation