Ok im just wondering, what ports do you need open for proftp to work

I thought it was just port 21 but when i have an iptables script running that just keeps open port 21 80 and a few others, it get this problem

When using ftp client, it will connect, but when i try to drag and drop files its says 'cannot connect to socket'

then when someone tries to connect to it through a browser, it wont even connect, and it will just say

cannot connect to socket

Is there another port i need open?

Thanx

Yes, it does open up another port during the session. I believe it is a random port > 1023.

You should be able to get around this by forcing the client to use passive transfers.

Depending on your OS, kernel, and IP filter, you can also modify your rules to compensate for this.

ok so if you put it in passive mode then it uses the same port every time?

if so, do u know which port

Cheers

Yeah, just port 21.

Here's a document that tells everything you'll ever need to know to make FTP service work with a packet filtering firewall:

http://www.netmax.com/fom/cache/223.html

Ahh... thanks for posting that. Looks like I misunderstood too.. d'oh.