allowing passive FTP from the outside

[Markku Kolkka]

Justin Zygmont kirjoitti viestissään (lähetysaika sunnuntai, 3. 
huhtikuuta 2005 00:33):
> are you sure ftp_conntrack is even needed?  I thought that's
> usually used just for stateful routing through a server, and
> not to connect to one from the outside.

No, that's a different module: ip_nat_ftp. The ip_conntrack_ftp 
module is required for the ESTABLISHED,RELATED rule to work for 
incoming FTP connections.

-- 
 Markku Kolkka
 markku.kolkka at iki.fi