From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <altcomm@list.ru>
Message-ID: <417CA258.6020803@list.ru>
Date: Mon, 25 Oct 2004 10:51:04 +0400
From: Jury Levykin <altcomm@list.ru>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; ru-RU; rv:1.6) Gecko/20040310
X-Accept-Language: ru-ru, ru
MIME-Version: 1.0
To: community@altlinux.ru
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam: Not detected
Subject: [Comm] apt-get =?koi8-r?b?3sXSxdogxsHF0tfPzCAtID8=?=
X-BeenThere: community@altlinux.ru
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: community@altlinux.ru
List-Id: Mailing list for ALT Linux users <community.altlinux.ru>
List-Unsubscribe: <https://lists.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=unsubscribe>
List-Archive: <http://lists.altlinux.ru/pipermail/community>
List-Post: <mailto:community@altlinux.ru>
List-Help: <mailto:community-request@altlinux.ru?subject=help>
List-Subscribe: <https://lists.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Mon, 25 Oct 2004 06:51:06 -0000
Archived-At: <http://lore.altlinux.org/community/417CA258.6020803@list.ru/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

Фрагмент правил iptables:

 ...
    # ---------------
    # FTP client (21)
    # ---------------

    # outgoing request
    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp  \
             -s $IPADDR --source-port $UNPRIVPORTS \
             --destination-port 21 -j ACCEPT

    iptables -A INPUT  -i $EXTERNAL_INTERFACE -p tcp ! --syn \
             --source-port 21 \
             -d $IPADDR --destination-port $UNPRIVPORTS -j ACCEPT


    # PORT mode data channel
    iptables -A INPUT  -i $EXTERNAL_INTERFACE -p tcp  \
             --source-port 20 \
             -d $IPADDR --destination-port $UNPRIVPORTS -j ACCEPT

    iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p tcp ! --syn \
             -s $IPADDR --source-port $UNPRIVPORTS \
             --destination-port 20 -j ACCEPT


    # ESTABLISHED and RELATED
    iptables -A INPUT  -p tcp -i $EXTERNAL_INTERFACE -d $IPADDR \
             -m state --state ESTABLISHED,RELATED -j ACCEPT

    iptables -A OUTPUT -p tcp -o $EXTERNAL_INTERFACE -s $IPADDR \
             -m state --state ESTABLISHED,RELATED -j ACCEPT

 ...


На мой взгляд, открыто все для работы ftp, но
после выполнения apt-get update получаю следующее:

# apt-get update
Get:1 ftp://updates.altlinux.com Master/2.2/i586 release [696B]
Err ftp://updates.altlinux.com Master/2.2/i586 release
  Could not connect passive socket.
Failed to fetch ftp://updates.altlinux.com/Master/2.2/i586/base/release  Could not connect passive socket.
Reading Package Lists... Done
Collecting File Provides... Done
W: Release files for some repositories could not be retrieved or authenticated. Such repositories are being ignored.
W: You may want to run apt-get update to correct these problems
E: Some index files failed to download, they have been ignored, or old ones used instead.


Что нужно подправить для нормальной работы apt ?