On 6/16/05, Thomas Cameron <thomas.cameron@xxxxxxxxxxxxxxx> wrote: > On Wed, 2005-06-15 at 11:35 -0700, kristina clair wrote: > > On 6/15/05, Alexander Dalloz <ad+lists@xxxxxxxxx> wrote: > > > Am Mi, den 15.06.2005 schrieb kristina clair um 19:46: > > > > > > > Has anyone else had any problems with some ftp clients and ncftpd on > > > > fc3? We upgraded some of our servers from redhat 7.3 to fc3, and > > > > several popular windows ftp clients encounter connection errors when > > > > connecting to the fc3 servers, but not to the redhat 7.3 servers. My > > > > command-line ftp client works fine for both. > > > > > > > Kristina > > > > > > Any chance it is a firewalling / iptables problem - you checked that? > > > > > > http://www.ncftp.com/ncftpd/doc/faq/trouble.html > > > --> > > > Users are unable to login. How do I diagnose the problem? > > > > > > Alexander > > > > If it were a firewall problem, shouldn't ALL connections be refused? > > I'm always able to connect from the command line ftp on my personal > > computer. > > No - ftp uses two ports, 20 and 21, and it uses tcp and udp on one port > but not the other (I never can remember which is which, 20 or 21). So > unless your iptables rules allow 20/tcp, 20/udp, 21/tcp and 21/udp, you > might get a funky, incomplete connection that won't allow, say passive > connections. > > Aha! Thanks for all the help. So what exactly does ip_conntrack_ftp do? Kristina