ProFTPD + mod_tls iptables problem

[sftd]

Hi,

When trying to connect to FTP over TLS I get the following error:

Status:	Connection established, waiting for welcome message...
Status:	Initializing TLS...
Status:	Verifying certificate...
Status:	TLS connection established.
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is the current directory
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (5,9,144,171,138,89).
Command:	MLSD
Error:	The data connection could not be established: ECONNREFUSED - Connection refused by server

1. Everything is working using plain FTP (active and passive with IPTables turned on).
2. Also everything is working when IPTables are turned off (active and passive).

I have IPTables 'ip_conntrack_ftp' module loaded.


Is someone able to point me in the right direction how to solve this?

Thank you for your help.

 

[Vaporizer]

The data ports are probably getting blocked by firewall because ip_conntrack_ftp can't track encrypted traffic. See this post for more information:
http://forum.directadmin.com/showthread.php?t=50814&p=261925#post261925

 

[sftd]

Thank you. That helped.