View Single Post

  #3 (permalink)  
Old 03-13-2008
Philippe Weill
 
Posts: n/a
Default Re: iptables ftp conntrack using port != 21

Eric wrote:
> Hi everyone,
>
> I want to run the ftp server of my linux box on a non-standard port
> (say, 20 for data but 666 for handshake). The problem is that
> obviously the connection tracking module in iptables only works with
> ports 20/21. If I check my logs I see that the client's LIST command
> is recognized as a NEW connection if my ftp server is set to use port
> 666.
> Is this a fact or am I just missing some setting?
>


you could load ip_conntrack_ftp module with another port in configuration

modprobe ip_conntrack_ftp ports=21,<port>



> Thanks in advance,
> Eric

Reply With Quote