Hi Mark,   
      
   >> specific module for conntrack to use for ftp connections and it does   
   >> easily manage passive connections quite well... i've not had any   
   >> problems with my ftp server and have never even though to use its   
   >> config for specific ports... it just works ;)   
      
   >> Depends on what you use, Mark.. Over here I am using a firewall,   
   >> I'd just forgotten to include the equivalent ports for BBBS's ftp   
   >> as I did for regular ftp:   
      
   > i knew you were using a firewall but i thought it might be one of those built   
   > into the modems instead of a seperate one...   
      
   Heh.. yeah, there is one on the dsl modem, but my system runs it's own.   
      
   >> /etc/services   
   >> [...]   
   >> ftp-data        20/tcp   
   >> ftp             21/tcp   
   >> [...]   
   >> bftp-data       60720/tcp                       #BBBS Bftp-data   
   >> bftp            60721/tcp                       #BBBS Bftp   
      
   >i wonder how that works... how do the remote FTP clients know to use 60720 for   
   > the control channel instead of 20?   
      
   For anonymous ftp, I have to tell people to use port 60721 rather than 21.  I   
   try to get the word out.. .. in files like filegate.zxx, etc.   
      
   For a while I had anonymous access enabled on port 21 with my main ftp server   
   (vsftpd), but got tired of people trying to download the entire drive here :)   
   You know the type perhaps.. some guy with a name like Chinanet-hostmaster   
   .. It wouldn't bother me so much if our bandwidth here was better.. :(   
      
   My main ftp server running vsftpd on port 21 is only used for those with ftp   
   accounts here for fidonet access.   
      
   >> Nah.. I don't think you understand my setup here .  Everything   
   >> works just fine ... The firewall I'm using is just like conntrack.   
   >> The only reason I added the 60720 above is because I suspected that   
   >> it might have been the reason why ftp requests at filegate.net   
   >> 60721 were failing earlier..   
      
   > i'm sure you'll find out if it works soon enough ;)   
      
   hehe.. yeah, it looks from the log like its doing ok, problem is I should get   
   more nodes for BBBS.  Maybe for Christmas    
      
   >> I will check out conntrack though I don't think I'll need it. we'll   
   >> see :)   
      
   > conntrack is a part of iptables IIRC...   
      
   I see that there is a module for it included in the firewall I'm using.. Ron   
   may have enable that module when he installed linux on this box.. so who knows   
   .   
      
   Take care,   
   Janis   
      
   --- BBBS/LiI v4.01 Flag   
    * Origin: Prism bbs (1:261/38)