FTP doesn't work through firewall?!

[arcull]

Hi guys. I installed vsftpd server and it works ok until I turn firewall on. I havse suse 10.2. I gues there must be some magic port, that needs to be open besides 20 and 21. Does anyone know which one, or is there any setting in vsftd.conf that needs to be changed. Here is my vsftpd.conf

anonymous_enable=NO
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
anon_umask=022
anon_upload_enable=YES
#anon_world_readable_only=YES
chroot_local_user=YES
dirmessage_enable=YES
download_enable=YES
ftpd_banner=Welcome to S_ FTP server.
guest_enable=YES
guest_username=virtual
listen=YES
local_enable=YES
one_process_model=NO
pam_service_name=vsftpd
xferlog_enable=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
write_enable=YES
#local_umask=022
connect_from_port_20=YES
#listen_port=2121
pasv_enable=YES
pam_service_name=vsftpd

and this are the opened ports in my firewall:
tcp:137 138 20:22 4 42826 43118 43119 4662 5
udp:139 20:21 4 42826 43118 43119 445 4662 5

under allowed services I added:
DNS Server
IPsec
NFS Client
NFS Server
SSH
TFT Server

Thanx for your help guys.

[Lazydog]

Best thing to do is turn on the firewall and set it to log everything. Then make a few tests with the ftp server and see what gets posted into the log file. This will help you find what might be causing the issue on the firewall and what port(s) your ftp server is trying to use.

[arcull]

Thanx Lazydog, can please tell me how to turn firewall logging on and where is the firewall log file located on disk. Thanx again

[Lazydog]

for iptables do something like this;

In the INPUT chain add the following;

iptables -A INPUT -j LOG --log-prefix "[FIREWALL-INPUT] : " --log-tcp-options --log-ip-options

In the OUTPUT chain add the following;

iptables -A OUTPUT -j LOG --log-prefix "[FIREWALL-OUTPUT] : " --log-tcp-options --log-ip-options

This will log everything. you shoudl see the logging in /bar/log/maeeasges

[arcull]

Thanx Lazydog, I'll give it a try

[Lazydog]

This will log everything. you shoudl see the logging in /bar/log/maeeasges

That should be /var/log/messages. Sorry.