RH6.1 masquerade problems
Posted on 2001-07-11
I have a RH6.1 machine that I have configured to be a firewall/Internet gateway... until yesterday.
I installed 6.1, configured it, and it was running well but all of the sudden it won't let me list(ls) directories when I FTP to a remote server. After taking VERY extreme measures, I finally isolated it down to an ipchains line. If I remark it out, Masquerading works great. If I put it in then it seems a little more sluggish, but I lose the "ls" command in an FTP session. That is locally at the machine AND masqueraded from w2000/w98 machines.
The line is: "/sbin/ipchains -i ppp0 -p tcp -y -j DENY"
What is weird is that it used to work... all the way until yesterday.
Can someone either help me configure the machine so this rule will work or help me out to write some rules that will DENY inbound TCP SYN packet yet still enable me to FTP?