Justin Zygmont kirjoitti viestissään (lähetysaika sunnuntai, 3. huhtikuuta 2005 00:33): > are you sure ftp_conntrack is even needed? I thought that's > usually used just for stateful routing through a server, and > not to connect to one from the outside. No, that's a different module: ip_nat_ftp. The ip_conntrack_ftp module is required for the ESTABLISHED,RELATED rule to work for incoming FTP connections. -- Markku Kolkka markku.kolkka@xxxxxx