[ILUG] ftp server test - iptables problem

[David Pintor]

Hi guys,

I'm doing some ftp server testing and can't figure out some problem. Maybe
someone can help me out here...

Basically my ftp server iptables looks like:

# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
*ACCEPT     tcp  --  anywhere             anywhere            tcp
dpt:ftp-data
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ftp *
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         state NEW udp
dpt:mdns
REJECT     all  --  anywhere             anywhere            reject-with
icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere            reject-with
icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination



When i try to connect remotely, it works but then I can't see the files:


$ ftp 192.168.15.4
Connected to 192.168.15.4 (192.168.15.4).
220 (vsFTPd 2.2.2)
Name (192.168.15.4:david): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
*ftp> ls
227 Entering Passive Mode (192,168,15,4,165,231).
ftp: connect: No route to host*
ftp>


I know it's a firewall problem cause when i stop iptables it works fine.
However I dont see what's wrong as port 20 and 21 are open... I also tried
opening it for both tcp and udp but no luck... any ideas?

Thanks!

David