On Thu, 11 Nov 2004, Alexander Dalloz wrote: > Am Do, den 11.11.2004 schrieb DrBean um 9:32: > > I want to open a range of ports so I can provide passive FTp, > This topic was recently asked and answered. See > http://www.redhat.com/archives/fedora-list/2004-November/msg00322.html A follow up message by CK Johnson is also useful. http://www.redhat.com/archives/fedora-list/2004-November/msg00345.html It is specific on why using the iptables module allows tracking of the ftp client trying to access through a port. Here is some info on what a 'packet of state established, related' is. Linkname: IPtables: Connection tracking URL: http://kalamazoolinux.org/presentations/20010417/conntrack.html -- Greg Matheson, Taiwan