VSFTP and SuSe 10.0 Firewall

I must be missing something. I've got VSftp working well as long as the
firewall is turned off. As soon as it is turned on VSftp is blocked. I
put port 21 in the advanced propeties for the external zone as FTP is
not in the list still no dice, anyone have any ideas.

Thanks
Jim


--
Linux Websites Links http://myweb.cableone.net/okieman7/linux.htm

Jim Jones adjusted his/her tinfoil beanie to post:

> I must be missing something. I've got VSftp working well as long as
> the firewall is turned off. As soon as it is turned on VSftp is
> blocked. I put port 21 in the advanced propeties for the external zone
> as FTP is not in the list still no dice, anyone have any ideas.
>
> Thanks
> Jim
>
>
Have you also opened port 20?

Port 21 is for the request data and 20 is where the actual data flows
to/from.

HTH
--
Mark
Twixt hill and high water
N. Wales, UK
Novell Support Forums SysOp

baskitcaise wrote:

> Have you also opened port 20?
>
> Port 21 is for the request data and 20 is where the actual data flows
> to/from.

Nope, that's not needed. The FTP server must be allowed to make connections
to port 20 on the other side if the client does not instruct the server to
use PASV mode. And most of the time connections to port 20 on the client
side are disallowed by firewalls.

--
Ruurd

Jim Jones wrote:

> I must be missing something. I've got VSftp working well as long as the
> firewall is turned off. As soon as it is turned on VSftp is blocked. I
> put port 21 in the advanced propeties for the external zone as FTP is
> not in the list still no dice, anyone have any ideas.

Is the IP visible on the outside? Does vsftpd listen on that address? Did
you try using PASV mode in the client?

--
Ruurd

baskitcaise wrote:
> Jim Jones adjusted his/her tinfoil beanie to post:
>
>> I must be missing something. I've got VSftp working well as long as
>> the firewall is turned off. As soon as it is turned on VSftp is
>> blocked. I put port 21 in the advanced propeties for the external zone
>> as FTP is not in the list still no dice, anyone have any ideas.
>>
>> Thanks
>> Jim
>>
>>
> Have you also opened port 20?
>
> Port 21 is for the request data and 20 is where the actual data flows
> to/from.
>
> HTH

Added Port 20 to the firewall open ports still no dice. I can use
either a web browser or a ftp cleint, no connection either way. The FTP
client tries pasv and both get connection not found or refused error
messages.

Jim

--
Linux Websites Links http://myweb.cableone.net/okieman7/linux.htm

Did you open up port 20? FTP requires port 21 for commands, and then port
20 for data to be transferred.

> I must be missing something. I've got VSftp working well as long as the
> firewall is turned off. As soon as it is turned on VSftp is blocked. I
> put port 21 in the advanced propeties for the external zone as FTP is
> not in the list still no dice, anyone have any ideas.
>
> Thanks
> Jim
>
>
> --
> Linux Websites Links http://myweb.cableone.net/okieman7/linux.htm