Re: iptables ftp conntrack using port != 21
Eric wrote:
> Hi everyone,
>
> I want to run the ftp server of my linux box on a non-standard port
> (say, 20 for data but 666 for handshake). The problem is that
> obviously the connection tracking module in iptables only works with
> ports 20/21. If I check my logs I see that the client's LIST command
> is recognized as a NEW connection if my ftp server is set to use port
> 666.
> Is this a fact or am I just missing some setting?
>
you could load ip_conntrack_ftp module with another port in configuration
modprobe ip_conntrack_ftp ports=21,<port>
> Thanks in advance,
> Eric
|