From: Gerhard Stegmann (gerhard.stegmannmagelan.net)
Date: Thu Jun 05 2003 - 11:03:37 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hello list.
i seem to have a recurring problem with the ip_conntrack_ftp-module.
it was not loaded by default, so i've put a line into the iptables-script , which does a :

modeprobe ip_conntrack_ftp

it should then track all incoming ftp-connections, ports source/destination high above 1024. but at all, it does not work.
the

lsmod says :

ip_conntrack_ftp 4000 0 (unused)
ip_conntrack 19724 2 [ip_conntrack_ftp ipt_state]

ftp-users can login, but get no data-connection :(

the basic question is : where is the dokumentation ? :))
do i have to activate the module with different switches than the iptables -m switches ?

thx.gerhard

-----Ursprüngliche Nachricht-----
Von: Vladimír Dvorak [mailto:dvorakvsuse.cz]
Gesendet: Donnerstag, 5. Juni 2003 10:31
An: istvan.holloija.hu; suse-securitysuse.com
Betreff: Re: [suse-security] Postfix problem

Istvan Hollo wrote:

> Hello List,
>
> I still have problem with my Postfix installation.
> I can send/receive mail locally but remote users can not.
> With "telnet localhost 25" i can write mail, but "telnet 1.2.3.4 25"
says "Connection refused".
> SMTPD_LISTEN_REMOTE = yes.
> What could be the problem?
>
> TIA
> istvan
>

netstat -ltn | grep 25

You probably see:
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN

But there should be for all incoming traffic:
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN

See in /etc/postfix/main.cf if there is
inet_interfaces = all

--vlada

--
Best Regards,

Vladimir Dvorak, Internal IT
---------------------------------------------------------------------
SuSE CR, s.r.o. e-mail: vladasuse.cz
Drahobejlova 27 tel:+420 2 96 542 373
190 00 Praha 9 fax:+420 2 8309 5374
Czech Republic http://www.suse.cz

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]