Urgent Help: Need to Restrict Ftp on WAN Allow only on LAN

kavirajan · Post by **kavirajan** » 2011/12/22 09:56:41

Hi Friends,

We are using Centos 6, in our system two Ethernet Cards are used one for LAN Access and another one for WAN internet.
We are used for Appache server, for showing demo site to clients.

So I need to give Restrict permission for the following.
1. Restrict FTP access on internet WAN. Only LAN users can use FTP.
2. In internet users (client) can only view Http site. Ftp should restricted on internet.

Please anyone Help me. Its very Urgent.

ixeous · Post by **ixeous** » 2011/12/22 21:27:03

You can use listen_address directive in vsftpd.conf or you could limit source network/range/local interface with iptables.

hansolo · Post by **hansolo** » 2012/01/05 11:31:05

Hi,

sorry for late reply, but
something similar I'm using on my server, where I block FTP access from all, except allowed IP's with IPTABLES.

What I do in IPTABLES :
[code]-A RH-Firewall-1-INPUT -s 192.168.0.0/16 -p tcp -m tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.0.0/16 -p tcp -m tcp -m state --state RELATED,ESTABLISHED --dport 21 -j ACCEPT[/code]
This is a Local LAN IP address range 192.168.0.0 which is allowed

everything else is Blocked by default because it's not listed as allowed.

CentOS