"ftp: no route to host error"

[Debbie Fleith]

I'm running a 2.4.21-47.ELsmp version of Linux and having some issues with ftp.

I can login to this host's ftp server (vsftp) but I can't transfer file, it gives me "no route to host" errors. Seems as if I can turn passive mode off and sometimes it works OK.

Anyone know what is causing this "no route to host" error?

[Manuel Wolfshant]

there is a badly configured firewall which allows port 21 (control channel) but does allow the creation of a data channel.

if you have control over the firewall, make sure you load the ftp contrack modules and add to the firewall a rule similar to
iptables -A INPUT -p tcp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
depending on your config, you might also need a similar rule for the OUTPUT chain

[Manuel Wolfshant]

"there is a badly configured firewall which allows port 21 (control channel) but does allow the creation of a data channel."

sorry I meant "but does NOT allow the creation of a data channel"