| /scripts/alcasar-iptables.sh |
|---|
| 550,8 → 550,8 |
| # On autorise les requêtes FTP |
| # FTP requests are allowed |
| modprobe nf_conntrack_ftp |
| $IPTABLES -t raw -A OUTPUT -p tcp --dport ftp -j CT --helper ftp |
| # modprobe nf_conntrack_ftp # no more needed with kernel > 5.15.85 |
| # $IPTABLES -t raw -A OUTPUT -p tcp --dport ftp -j CT --helper ftp # no more needed with kernel > 5.15.85 |
| $IPTABLES -A OUTPUT -o $EXTIF -p tcp --dport ftp -j ACCEPT |
| $IPTABLES -A OUTPUT -o $EXTIF -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT |