Bug 151646

Summary:	load ip_conntrack_ftp if FTP enabled in r-c-securitylevel
Product:	Red Hat Enterprise Linux 3	Reporter:	Patrick C. F. Ernzer <pcfe>
Component:	redhat-config-securitylevel	Assignee:	Chris Lumens <clumens>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3.0
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-03-28 21:16:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Patrick C. F. Ernzer 2005-03-21 12:45:49 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050302 Firefox/1.0.1 Fedora/1.0.1-1.3.2

Description of problem:
if we allow users to select FTP as a protocol, we really should also make an entry in /etc/sysconfig/iptables-config to load ip_conntrack_ftp

Version-Release number of selected component (if applicable):
redhat-config-securitylevel-1.2.9.2-1

How reproducible:
Always

Steps to Reproduce:
1. open redhat-config-securitylevel
2. select FTP as an allowed protocol with an enabled firewall
3. apply
4. try to connect via ftp to the host this was just executed on
  

Actual Results:  we are allowing related connections, but as we do not load ip_conntrack_ftp ftp is still not possible

Expected Results:  ftp working

having the following in /etc/sysconfig/iptables-config makes it work
IPTABLES_MODULES="ip_conntrack_ftp"

Additional info: