On Fri, 2005-06-17 at 13:25 -0400, kristina clair wrote: > > Aha! Thanks for all the help. > > So what exactly does ip_conntrack_ftp do? > > Kristina It tracks connections through the firewall. If I understand correctly, it is what manages the port numbers used for ftp connections on ports 20 and 21, as well as managing the high port (1024 and above) used by the client, allowing active and passive ftp. Thomas