[CLUE-Tech] enabling ftp

[Cyberclops]

I just attended a Linux club meeting on security last night and what you
want to do isn't really recommended at least from my understanding of
the presentation.  It soulds like you might need a firewall for the
firewall.  For one thing according to the presentation when you ftp into
your box, your password will be sent in plain text and can be
intercepted.  Therefore I conjecture that reason you can't get in to
your own site is because your firewall is doing a good job.

rfrank wrote:
> 
> Usually the how-to's and the newbie help files get me through it,
> but I'm stumped on this one.  I've taken Mandrake 7.2 and set it up
> as a firewall/IP masquerader on a dedicated machine with my home
> network on the 2nd Ethernet card side of that box. That all works fine
> as far as I can tell.
> 
> Now, from outside, I want to be able to ftp into that machine and
> get files.  (Later I want to telnet and ssh and even put a web page up,
> but that's further down the learning curve.)
> 
> I have the (default) entry in /etc/passwd for ftp, I haven't modified
> /etc/ftpaccess but made sure it's there.  I do have the line
> /sbin/modprobe ip_masq_ftp in my /etc/rc.d/rc.firewall script.
> /etc/inetd.conf looks good to me (as best as I would know).
> But when I try to connect to my dedicated IP address from
> a machine outside my local network, I get:
>   [rfrank at brechin rfrank]$  ftp 24.221.212.160
>   ftp: connect: Connection refused
>   ftp>
> I get similar results with telnet to the same address.
> 
> This can't be that tough.  What have I missed?  A firewall rule?
> Turning on some daemon?
> 
> Roger Frank
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech