Can I use ip_conntrack_ftp on a server firewall ?

[Aaron Gray]

>> How do I create rules to allow FTP passive and active connections to the 
>> server ?
>> 
>> Do I use ip_conntrack_ftp or can I just create some rules that will do 
>> the job ?
> 
> You need ip_conntrack_ftp.  To get that modules loaded automatically,
> Just edit /etc/sysconfig/iptables and add "ip_conntrack_ftp" to the
> "IPTABLES_MODULES=" line.

Okay I have ip_conntrack_ftp loaded in /etc/sysconfig/iptables-config.

Still it must require some rules to use it.

Aaron