[TriLUG] Curious VSFTP issue

[Joseph Mack NA3T]

On Wed, 7 Dec 2005, Dave Sorenson wrote:

>>> 
>>>>> directory listing. I've tried both passive and active modes with
>>>>> multiple FTP clients, scoured the vsftpd.conf, firewall is open on 20
>>>>> and 21 (I even tried disabling the firewall briefly to make sure that
>>>>> was not the problem) but no luck. anyone ever see this before?

VSFTP in active mode calls from a high (>1024) port rather 
than port 20. This is to allow it to run without root 
privileges. watch it with netcat

>>> Sounds like passive FTP not getting through the firewall.  Try doing a
>>> 'modprobe
>>> ip_conntrack_ftp' on the server, or seeing if you can force your client to
>>> use
>>> active mode only.

iptables "RELATED" knows about the calling port

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml 
Homepage http://www.austintek.com/ It's GNU/Linux!