dropping untracked packet messages

Thomas Molina tmolina@home.com
Fri, 28 Jul 2000 08:29:23 -0500 (CDT)


Netfilter 1.1.1, kernel 2.4.0test5-pre6 and others.  I get this:

ftp> ls
200 PORT command successful.
NAT: 3 dropping untracked packet c1f832a0 6 24.0.54.216 -> 63.209.15.252
150 Opening ASCII mode data connection for file list.

My iptables rules show:

[root@wr5z /root]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere           state
RELATED,ESTABLISHED
ACCEPT     all  --  kids                 anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

[root@wr5z /root]# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  kids                 anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Any ideas?