FTP Stub for MonMotha's IPTABLES Firewall Script


/sbin/insmod ip_conntrack_ftp
/sbin/insmod ip_nat_ftp

IPTABLES="/sbin/iptables"

# The control connection
$IPTABLES -A INPUT  -i eth0 -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT
$IPTABLES -A OUTPUT -o eth0 -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT

# The data connection in active mode
$IPTABLES -A INPUT  -i eth0 -p tcp --sport 20 -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A OUTPUT -o eth0 -p tcp --dport 20 -m state --state ESTABLISHED -j ACCEPT 

# The data connection in passive mode
$IPTABLES -A INPUT  -i eth0 -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED -j ACCEPT
$IPTABLES -A OUTPUT -o eth0 -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT