Thursday, October 22, 2009

Getting FTP to work through IP tables

Say you're like me, and you've recently configured a server with vsftpd, and you're pretty sure you have all your firewall rules done right, and you can connect to the ftp server, but you just can't seem to list directories. You get a LIST command 500 error and your annoyed. If so, then this might help. If you use NAT on your server with vsftp you must allow ftp natting.

You need to edit this file:
/etc/sysconfig/iptables-config

Add follow line:
IPTABLES_MODULES="ip_nat_ftp"

And then restart your iptables and vsftpd and you're off and running.

No comments: