/scripts/alcasar-iptables.sh |
---|
550,8 → 550,8 |
# On autorise les requĂȘtes FTP |
# FTP requests are allowed |
modprobe nf_conntrack_ftp |
$IPTABLES -t raw -A OUTPUT -p tcp --dport ftp -j CT --helper ftp |
# modprobe nf_conntrack_ftp # no more needed with kernel > 5.15.85 |
# $IPTABLES -t raw -A OUTPUT -p tcp --dport ftp -j CT --helper ftp # no more needed with kernel > 5.15.85 |
$IPTABLES -A OUTPUT -o $EXTIF -p tcp --dport ftp -j ACCEPT |
$IPTABLES -A OUTPUT -o $EXTIF -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT |