ncftpd on fc3 malfunctioning?

[kristina clair]

On 6/16/05, Thomas Cameron <thomas.cameron at camerontech.com> wrote:
> On Wed, 2005-06-15 at 11:35 -0700, kristina clair wrote:
> > On 6/15/05, Alexander Dalloz <ad+lists at uni-x.org> wrote:
> > > Am Mi, den 15.06.2005 schrieb kristina clair um 19:46:
> > >
> > > > Has anyone else had any problems with some ftp clients and ncftpd on
> > > > fc3?  We upgraded some of our servers from redhat 7.3 to fc3, and
> > > > several popular windows ftp clients encounter connection errors when
> > > > connecting to the fc3 servers, but not to the redhat 7.3 servers.  My
> > > > command-line ftp client works fine for both.
> > >
> > > > Kristina
> > >
> > > Any chance it is a firewalling / iptables problem - you checked that?
> > >
> > > http://www.ncftp.com/ncftpd/doc/faq/trouble.html
> > > -->
> > > Users are unable to login.  How do I diagnose the problem?
> > >
> > > Alexander
> >
> > If it were a firewall problem, shouldn't ALL connections be refused?
> > I'm always able to connect from the command line ftp on my personal
> > computer.
> 
> No - ftp uses two ports, 20 and 21, and it uses tcp and udp on one port
> but not the other (I never can remember which is which, 20 or 21).  So
> unless your iptables rules allow 20/tcp, 20/udp, 21/tcp and 21/udp, you
> might get a funky, incomplete connection that won't allow, say passive
> connections.
> 
> 

Aha!  Thanks for all the help.

So what exactly does ip_conntrack_ftp do?

Kristina