enabling FTP passive mode?

Normally I use SSH to x-files, but I have one remote tool that needs
to send a periodic file to a machine and it's only choice is FTP.
So, I set up the Linksys router to port forward 21 to the receiving
PC, but whenever I try to FTP into it, I get the message:

227 Entering Passive Mode ((IP number),163,252)
LIST -aL

425 Security: Bad IP connecting.

I know it has something to do with allowing passive mode through the
firewall, but how? I've no clue?
Even just a pointer would be nice.
Oh, and I'm using RedHat Fedora 1 if that matters.

Thanks!
Liam

LRW <deja@celticbear.com> wrote:
> Normally I use SSH to x-files, but I have one remote tool that needs
> to send a periodic file to a machine and it's only choice is FTP.
> So, I set up the Linksys router to port forward 21 to the receiving
> PC, but whenever I try to FTP into it, I get the message:

> 425 Security: Bad IP connecting.

You may also need to open up the ftp-data port, although stateful
firewalls should do this anyway (if they have the
application-layer-protocol ftp connection tracking, such as the
ip_conntrack_ftp).

--
Cameron Kerr
cameron.kerr@paradise.net.nz : http://nzgeeks.org/cameron/
Empowered by Perl!

In article <3a1d1813.0402021252.10ea7e70@posting.google.com >, LRW wrote:
> Normally I use SSH to x-files, but I have one remote tool that needs
> to send a periodic file to a machine and it's only choice is FTP.
> So, I set up the Linksys router to port forward 21 to the receiving
> PC, but whenever I try to FTP into it, I get the message:
>
> 227 Entering Passive Mode ((IP number),163,252)
> LIST -aL
>
> 425 Security: Bad IP connecting.

You need some kind of ftp_connection_tracking module of some kind if you
are port forwarding FTP requests since the port command will need
modifying by the firewall so that it contains the modified address.

Does Linksys support FTP connection tracking?

HTH,

Fluffy

--
woof woof