RE: WuFTP server with Iptables.

Please ignore my last email. I fix it by using vsftpd.
Cheers,
Jari

-----Original Message-----
From: Jari IT [mailto:jari_info@yahoo.uk.co]
Sent: Saturday, September 25, 2004 2:55 PM
To: security-basics@securityfocus.com
Subject: WuFTP server with Iptables.



Hi all,

I am setting a FTP server with Iptable firewall.
Here is the rule, which I get from www.openna.com.


    # incoming request
    iptables -A INPUT  -i $EXTERNAL_INTERFACE -p tcp  \
             --source-port $UNPRIVPORTS \
             -d $IPADDR --destination-port 21 -j ACCEPT

    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp ! --syn \
             -s $IPADDR --source-port 21 \
             --destination-port $UNPRIVPORTS -j ACCEPT


    # PORT MODE data channel responses
    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp  \
             -s $IPADDR --source-port 20 \
             --destination-port $UNPRIVPORTS -j ACCEPT

    iptables -A INPUT  -i $EXTERNAL_INTERFACE -p tcp ! --syn \
             --source-port $UNPRIVPORTS \
             -d $IPADDR --destination-port 20 -j ACCEPT


    # PASSIVE MODE data channel responses
    iptables -A INPUT  -i $EXTERNAL_INTERFACE -p tcp  \
             --source-port $UNPRIVPORTS \
             -d $IPADDR --destination-port $UNPRIVPORTS -j ACCEPT

    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp ! --syn \
             -s $IPADDR --source-port $UNPRIVPORTS \
             --destination-port $UNPRIVPORTS -j ACCEPT

However, I still cannot connect from my house (behind ADSL router/modem) to
that site.
Stop this firewall, the FTP server work well.

Please advice me about this.
Thanks in advance,
Jari