VSFTPD + Firewall

[Robert Slade]

On Fri, 2004-12-24 at 16:35, Mostafa Z. Afgani wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Dear all,
> 
> I am encountering a strange problem with VSFTPD on FC3. On FC2 and FC1 I
> could turn on the system firewall and check the FTP box to allow FTP
> traffic and things would work as expected. However, under FC3 with the
> firewall turned on and set to allow FTP traffic users have problem
> connecting. Users are able to reach the FTP and even are asked for the
> username and password. However, once the password is accepted the
> directory listing never comes.
> 
> Once the firewall is turned off, users can use the site normally.
> 
> Does anyone have any clue as to why this might happen?
> 
> TIA
> - -M
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (GNU/Linux)
> 
> iD8DBQFBzEUy14B2Pwzes+4RAvzZAJwJKk4CS7mAJUOtkLauXsB3VM6TfgCgnWVp
> NnXTuOQNXV5NK3IjprlSwa8=
> =CIbn
> -----END PGP SIGNATURE-----

You need to read up on ftp passive mode etc, have a look on the VSFTPD
site. You may find that www.iptablesrocks.org helps. I suspect that you
need to add the ip_conntracK_ftp module to the iptables.conf file.

Rob