Search This Blog

Tuesday, May 08, 2007

Re: working ftp-rules with iptables

On Tue, May 08, 2007 at 07:47:48AM +0200, Lutz Feldgen wrote:
>> Hi,
>>
>
> Hi,
>
>
>> I try to get the following working with iptables:
>>
>> incoming ftp (passive or active)
>> outgoing ftp (to single special ftp-server)
>> apt-get
>>
>> Can anybody help me with this, its driving me mad...
>>
>
> First of all, what do you really want ? Running a ftp server on your own
> computer or being able to access external ftp server, or perhaps both.
>
> Have a look at those two pictures in order to see the differences between
> active and passive mode (french link but it does not matter) :
>
> http://smhteam.info/wiki/index.linux.php5?wiki=DiagrammesFtp
>
> What rules have you tried to run by now ?
>
Hi,
thanks for the quick answer and sorry for the incomplete description.
Right now I cannot fetch the used ruleset from the server but my
intention is to keep it as secure for my server as possible.
I want to run an ftp-server to give the possibility to upload something
but also need access to an external ftp-server for backups. At least
apt-get should find a way to fetch packets through the firewall. The
decision whether to run active or passive on my own ftp-server depends
on the security level of the underlying ruleset.

regards,
Lutz


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

No comments: