comp.os.linux.networking
back to index
Group: comp.os.linux.networking
From: Philippe Weill
Date: Thursday, March 13, 2008 1:23 AM
Subject: Re: iptables ftp conntrack using port != 21
From: Philippe Weill
Date: Thursday, March 13, 2008 1:23 AM
Subject: Re: iptables ftp conntrack using port != 21
Eric wrote:
> Hi everyone,
>
> I want to run the ftp server of my linux box on a non-standard port
> (say, 20 for data but 666 for handshake). The problem is that
> obviously the connection tracking module in iptables only works with
> ports 20/21. If I check my logs I see that the client's LIST command
> is recognized as a NEW connection if my ftp server is set to use port
> 666.
> Is this a fact or am I just missing some setting?
>
you could load ip_conntrack_ftp module with another port in configuration
modprobe ip_conntrack_ftp ports=21,
> Thanks in advance,
> Eric
