firewall problem with apache mod_ftpd

binro · l33t Joined: 06 May 2005 Posts: 742 Location: Bangkok

I know this is a vexed issue because it says so in the mod_ftpd wiki entry! I emerged mod_ftpd and set it up precisely as in the wiki howto. It works fine via the LAN but not externally, I get a time-out when data needs to flow. Salient points are:
o my server is in the ADSL router's DMZ;
o the server has iptables rules that open ports 20, 21, 25, 80, 110, etc. POP, SMTP and HTTP work fine;
o using ncftp I can log in but get and ls commands time-out;
o ncftp starts in PASV mode and then falls back to PORT: neither work.

I can see the commands in the apache logs:

mod_ftpd is 0.13.0. Anybody any idea what is going on? (Googleing on "mod_ftpd firewall" only produces links to the wiki article. :-(

)

TIA
_________________
"Ship me somewheres east of Suez, where the best is like the worst,
Where there ain't no Ten Commandments an' a man can raise a thirst"
from "Mandalay" by Rudyard Kipling

binro · l33t Joined: 06 May 2005 Posts: 742 Location: Bangkok

The problem was in my iptables rules. Having read just about everything out there on this subject, I eventually added the following to /var/lib/iptables/rules-save: