Thread: Even more FTP questions (FTP, PASV and iptables)

Hi,

The more I think about it the more I wonder if I need to edit my iptables manually to do what I want.

On my home network, I have an Ubuntu server running vsftpd, using SSL. It works just fine inside my dd-wrt firewall. I can authenticate to it and upload and download files like a champ.

However, once I try doing this from outside the firewall, no joy. I am able to authenticate, but once the FTP client tries to LIST anything, it hangs indefinitely.

I have tried opening up high ports (like tens of thousands of them), but this hasn’t changed anything.

I started looking around and noticing that some folks are editing their iptables manually to get around this issue using RELATED ports.

I am very much a networking novice, so I’d appreciate any help you can send my way.

Thanks,
JJJ

nothin’ huh?