[Firehol-support] ftp-server

[Grigory Fateyev]

Hello!

Trying to use frirehol on SUSE 10.0 server. But from time to time some
users want to ftp server using "My Computer", but can't. Please, looking
on my email, suggest what may be wrong and why any users can't login?

In firehol we have:
# grep ftp /etc/firehol/firehol.conf
        server ftp      accept log "ftp-server"
        client "smtp icmp dns ftp http ssh ntp irc"       accept

And modules:
# lsmod | grep ftp
ip_conntrack_ftp       76944  0
ip_conntrack           48872  3
ip_conntrack_ftp,ip_conntrack_irc,ipt_state

In logs such entries:
Apr  9 08:51:23 linux kernel: ftp-server:IN=eth0 OUT=
MAC=00:13:8f:88:57:92:00:03:a0:11:bc:18:08:00 SRC=91.192.x.x
DST=209.139.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=47 DF PROTO=TCP
SPT=34182 DPT=21 WINDOW=0 RES=0x00 RST URGP=0 Apr  9 08:51:23 linux
kernel: ftp-server:IN=eth0 OUT=
MAC=00:13:8f:88:57:92:00:03:a0:11:bc:18:08:00 SRC=91.192.x.x
DST=209.139.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=48 DF PROTO=TCP
SPT=34182 DPT=21 WINDOW=0 RES=0x00 RST URGP=0 Apr  9 08:51:23 linux
kernel: ftp-server:IN=eth0 OUT=
MAC=00:13:8f:88:57:92:00:03:a0:11:bc:18:08:00 SRC=91.192.x.x
DST=209.139.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=49 DF PROTO=TCP
SPT=34182 DPT=21 WINDOW=0 RES=0x00 RST URGP=0

Thanks!
-- 
Всего наилучшего! Григорий
greg [at] anastasia [dot] ru