[NTLUG:Discuss] ftp through RH5.1 masq machine

[Dale Massey]

Kelly Scroggins wrote:
> 
> I've got a Red Hat 5.1 machine with masq running.  I can surf the net until
> my hearts content.
> 
> I can't use ftp from inside my LAN.  I can login to an ftp server, but I
> can't list files. I CAN "pwd" though.
> 
> I've decided the problem is with my gateway because I CAN ftp to the same
> sites from other locations, like work.
> 
> I'm puzzled because I haven't got any firewall rules set up yet (yikes!).  I
> can't get them to work.  All I have is an "ALL:ALL" entry in the
> /etc/hosts.deny file for now. Which as I stated earlier, hasn't prevented me
> from surfing the web or loging into an ftp server.
> 
> So I would think that any packets that are returning (ACK bit is set) would
> be allowed back in to my network.  And apparently does, with this
> exception.  This problem must be unrelated to the issue.
> 
> Do you know of anything I could try off hand?
> 
> Thanks,
> Kelly
> 
> _______________________________________________
> http://ntlug.org/mailman/listinfo/discuss


Kelly,

Sounds like you need to load the ftp module.

modprobe -a /lib/modules/kernel#/ipv4/ip_masq_ftp.o

This should fix it for you. The kernel# would be the version of the
kernel you are using. For me that would be 2.2.5-22 (it's a redhat
kernel). You can add this line and any of the other modules you want to
your firewall rules script or directly to your  rc.local file.

Dale Massey