Iptables FTP

dpitta
(usa Debian)

Enviado em 17/05/2018 - 23:09h

Já tentei de varias formas liberar o FTP para um ip conhecido, mas estou tendo pacotes DROPADOS.
Estou usando como cliente o FILEZILLA.

# tail -f /var/log/messages |grep 186.227.215.110
May 17 22:57:22 emissor kernel: [186142.511673] [fw-input-drop]IN=eth0 OUT= MAC=00:16:3e:2c:b1:09:0c:c4:7a:1e:a3:1e:08:00 SRC=186.227.215.110 DST=187.191.99.165 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=28243 DF PROTO=TCP SPT=57620 DPT=56772 WINDOW=64240 RES=0x00 SYN URGP=0
May 17 22:57:25 emissor kernel: [186145.520194] [fw-input-drop]IN=eth0 OUT= MAC=00:16:3e:2c:b1:09:0c:c4:7a:1e:a3:1e:08:00 SRC=186.227.215.110 DST=187.191.99.165 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=28244 DF PROTO=TCP SPT=57620 DPT=56772 WINDOW=64240 RES=0x00 SYN URGP=0
May 17 22:57:31 emissor kernel: [186151.514117] [fw-input-drop]IN=eth0 OUT= MAC=00:16:3e:2c:b1:09:0c:c4:7a:1e:a3:1e:08:00 SRC=186.227.215.110 DST=187.191.99.165 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=28245 DF PROTO=TCP SPT=57620 DPT=56772 WINDOW=64240 RES=0x00 SYN URGP=0

AS REGRAS ESTÃO ASSIM
MEUIP_01=187.191.99.165
CASA=186.227.215.110


iptables -A INPUT -p tcp --sport 1024:65535 --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp -s $CASA -d $MEUIP_01 --destination-port 20 -j ACCEPT
iptables -A INPUT -p tcp -s $CASA -d $MEUIP_01 --destination-port 21 -j ACCEPT
modprobe ip_conntrack_ftp
iptables -A INPUT -j LOG --log-prefix [fw-input-drop]