iptables rules for ftp

the rules not red is the orginal rules only accept 22 ssh . and i want it allow ftp server can access by ie or ftp client. how should the rules be ?
the red rules is I added ,but it doesn't work .

thanks for help .

 

try this

-A RH-Firewall-1-INPUT -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp --dport 20 -j ACCEPT

also
-A RH-Firewall-1-INPUT -j LOG (I think thats the syntax)

and look at syslog to see whats happening when you ftp

also you may need some --sport 20,21 rules

b

 

Which distribution do you use?

 

I'm using centOS 5.1

thanks

 

Do you need to /sbin/modprobe ip_conntrack_ftp ?

 

Due to the nature of the FTP protocol yes you need connection tracking so the module needs to be loaded to make it permanent add the module to

/etc/sysconfig/iptables-config