[Zope] zope ftp & firewall setup
Davis Marques
Davis Marques" <dmm@machinic.net
Mon, 24 Jun 2002 17:02:35 -0700
This is a multi-part message in MIME format.
------=_NextPart_000_0030_01C21BA0.F01069C0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
hi;
I'm wondering if anyone has experience setting up iptables for Zope FTP =
access. I need to add this service
to my machine, but am not sure what an appropriate set of rules would =
be. This is what I have so far:
# Zope FTP (port 8021)
# allow incoming tcp requests to port 8021
/sbin/iptables -A INPUT -i $OUTSIDEIF -p tcp \
--source $ANYWHERE --source-port $UNPRIVILEGED \
--destination $OUTSIDEIP --destination-port 8021 \
-j ACCEPT
# allow outgoing tcp packets from 8021
/sbin/iptables -A OUTPUT -o $OUTSIDEIF -p tcp \
--source $OUTSIDEIP 8021=20
--destination $ANYWHERE --destination-port $UNPRIVILEGED =
\
-j ACCEPT
Davis
------=_NextPart_000_0030_01C21BA0.F01069C0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.3315.2870" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>hi;</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>I'm wondering if anyone has experience =
setting up=20
iptables for Zope FTP access. I need to add this =
service</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>to my machine, but am not sure what an =
appropriate=20
set of rules would be. This is what I have so far:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2># Zope FTP (port =
8021)</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2><BR># allow incoming tcp =
requests to port=20
8021<BR>/sbin/iptables -A INPUT -i $OUTSIDEIF -p tcp =
\</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2> =
=20
--source $ANYWHERE --source-port=20
$UNPRIVILEGED \</FONT></DIV>
<DIV><FONT face=3D"Courier New"=20
size=3D2> &nbs=
p; --destination=20
$OUTSIDEIP --destination-port 8021 \</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2> =
=20
-j ACCEPT</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2># allow outgoing tcp =
packets from=20
8021</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2>/sbin/iptables -A OUTPUT =
-o=20
$OUTSIDEIF -p tcp \</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2> =
=20
--source $OUTSIDEIP 8021 =
</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2> =
=20
--destination $ANYWHERE =
--destination-port=20
$UNPRIVILEGED \</FONT></DIV>
<DIV><FONT face=3D"Courier New" size=3D2> =
=20
-j ACCEPT</FONT></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><FONT face=3D"Courier New" size=3D2></FONT> </DIV>
<DIV><FONT size=3D2><FONT =
face=3DArial>Davis</FONT></DIV></FONT></BODY></HTML>
------=_NextPart_000_0030_01C21BA0.F01069C0--