Sponsored Content
Full Discussion: iptables: block/allow ftp
Special Forums Cybersecurity iptables: block/allow ftp Post 17579 by sTorm on Monday 18th of March 2002 05:26:14 AM
Old 03-18-2002
iptables: block/allow ftp

I have 2 LAN's, seperated by a firewall, running iptables on it.
I want only allow ftp access from one to the other LAN.

Server 1 in LAN 1 should have ftp access to Server 2 in LAN 2
Server 2 in LAN 2 should not have ftp access to Server 1 in LAN 1.

Can someone tell me how to set up the rules for that?
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

iptables, ftp

I have allready opened a thread about this, but my question was really weird formed, so I'm writting it here again: I have a Network with 4 FTP Servers, then a firewall, and then a Network with clients. The clients should have access to the FTP Servers, but it should not be possible to connect... (2 Replies)
Discussion started by: sTorm
2 Replies

2. Shell Programming and Scripting

FTP inside a block of code

I need help on the code below. I am getting a compile error syntax error at line 283 : `<<' unmatched Looks like it doesn't like the << on the ftp line below. If I ran the code outside of this block everything work fine, but when I put in a block of code or in a function, I got syntax error. I... (1 Reply)
Discussion started by: leemjesse
1 Replies

3. Solaris

Want to block ftp for root user

Hi Friends, I would like to block the root user for doing ftp. As I am aware that I need to put the entry for root in /etc/ftpusers.....am I right...??? But I am not able to edit the file & even more command is not working. #ls -l ftp* total 14 -rw-r--r-- 1 root sys 1249 Jun... (3 Replies)
Discussion started by: jumadhiya
3 Replies

4. UNIX for Dummies Questions & Answers

How to block an anonymous ftp user?

Could anyone provide information on how to block a specific client machine from being able to log onto anonymous ftp? (10 Replies)
Discussion started by: dennisheazle
10 Replies

5. Shell Programming and Scripting

Block incoming traffic FTP from internet using iptables

Hi everybody. I have the next scenary: eth0: WAN eth1: DMZ eth2: LAN I need to block all incoming trafic from the internet through my network LAN using iptables. I have squid but i need to do this using ipatbles. I have been listening about iptables -A FORDAWARD but I am stuck right... (0 Replies)
Discussion started by: edeamat
0 Replies

6. AIX

Block users ftp service

Hello everyone I create a file /etc/ftpusers to block users. I put the names of the users and I refresh the service inetd. My question is the user still log in by ftp.???? What I miss Thanks for your opinions. Greetings (2 Replies)
Discussion started by: lo-lp-kl
2 Replies

7. UNIX for Dummies Questions & Answers

iptables-ftp

I have set up a firewall on my centOS 5.6 box. I copied it from info I found online related to web servers. Everything seems to work fine but my ftp from my LAN. I am not able to ftp into the directories at all. I have the box set up as a test web server. Here is my iptable: I have opened ports... (7 Replies)
Discussion started by: ktb231
7 Replies

8. Red Hat

iptables ftp denies ls

Hi, Following is the output of iptables -S command -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -s 192.168.0.5/32 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s 192.168.0.5/32 -p udp -m udp --dport 22 -j ACCEPT -A INPUT -s 192.168.0.0/24 -p udp -m udp --dport 20 -j... (3 Replies)
Discussion started by: shahdharmit
3 Replies

9. IP Networking

vsftp | active and passive ftp | iptables

I am using vsftp but I can't login with passive mode. I can only login with active mode. I can login with both mode when service of iptables is stop. In active mode : 20,21 must be open from server site. 1023 and over must be open at client site. In passive mode : only 21,1023 and over must be... (1 Reply)
Discussion started by: getrue
1 Replies

10. IP Networking

iptables problem with ftp

I have a pretty stock iptables script. One rule allows active ftp from an outside IP address. To troubleshoot it, I opened up ftp to all connections from the outside. When a user outside our domain connects via FTP, they are denied. If I flush the rules, the ftp takes place successfully. This... (2 Replies)
Discussion started by: bricoleur
2 Replies
LES(8)							       Maintenance Commands							    LES(8)

NAME
les, bus - ATM LAN Emulation service demons SYNOPSIS
lecs [-l listen_address] [-f configuration_file] [-d ] DESCRIPTION
LE Service consists of three components: LAN Emulation Configuration Server (lecs), LAN Emulation Server ( les(8)) and Broadcast and Unknown Server (bus(8)). Lecs implements the distribution of LECs to different emulated LANs. This is done by giving different LAN Emulation Server ATM addresses to LECs. Distribution is based on lecs's configuration database and information provided by the LE client. It is not required that a lecs exists for all emulated LANs. It is possible to bypass this configuration phase by directly telling ATM address of the les(8) to the LEC. Configuration file example for lecs: # Our ATM address (should be included to differentiate us from # e.g. LEC) # Must be before ELAN definitions 470023000000030300010002010020ea000ae905 # ELAN name is inside brackets. # Parameters below are for Ethernet type LE (Linux & almost all # other LE clients) [tut-lane1] # Address of the LES LES:=470023000000030300010002010020ea000ae901 # 802_3 or 802_5 (802_3 = Ethernet) Type:=802_3 # 1515, 4544, 9234 or 18190 (1516= Ethernet) Max_Frame:=1516 # ATM address for hosts that are guided to this ELAN. # Wildcard is x or X. 470023000000030300010002010020ea0005aax0 470023000000030000010002010020ea0005bx00 47.002300000003030001000201.00603E2FDX23.00 470023000000030300010002010020ea000Xxx00 DEFAULT # Another ELAN, which has empty name [asdf] # This directive sets this elan as the default i.e. it will be # included if LEC's configure request could not be matched to # other ELANs #DEFAULT LES= 470023000000030300010002010020ea000ae902 Type=Ethernet Rules for finding ELAN definitions using information provided in LE_CONFIGURE_REQUEST and the configuration file are as follows: 1. Find an entry where ELAN-NAME matches exactly and an ATM address of the LEC is found in ELAN definition. These are to match exactly with the information given in LE_CONFIGURE_REQUEST. If ELAN-NAME is found, but ATM address doesn't match then reject with reason "Permission denied". 2. Search for first ELAN which matches in type of emulated LAN, maximum frame size and ATM address of the LEC. 3. If matching ELAN was not found, return default ELAN definitions. 4. No match, so request is rejected with reason "No Configuration". SIGHUP restarts the server. OPTIONS
-d Reads the configuration file, dumps its contents and exits. -l listen_address Use the listen_address to where wait connections. -f configuration_file Use the specified configuration file instead of .lecs_conf. FILES
.lecs_conf configuration file BUGS
Undocumented. AUTHOR
Marko Kiiskila, TUT <carnil@cs.tut.fi> SEE ALSO
les(8), atmsigd(8), zeppelin(8) Linux Sep 11, 1996 LES(8)
All times are GMT -4. The time now is 01:35 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy