diff --git a/Shorewall-docs/FTP.xml b/Shorewall-docs/FTP.xml
index c3833b414..397ab6d8f 100644
--- a/Shorewall-docs/FTP.xml
+++ b/Shorewall-docs/FTP.xml
@@ -26,8 +26,8 @@
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
- Texts. A copy of the license is included in the section entitled "GNU Free Documentation License".
+ Texts. A copy of the license is included in the section entitled
+ GNU Free Documentation License
.
@@ -51,7 +51,7 @@
- Install the Mandrake "cooker" version of Shorewall.
+ Install the Mandrake cooker
version of Shorewall.
@@ -67,10 +67,10 @@
role="bold">control connection goes from the FTP client to port
21 on the FTP server. This connection is used for logon and to send
commands and responses between the endpoints. Data transfers (including
- the output of "ls" and "dir" commands) requires a second
- data connection. The data connection is
- dependent on the mode that the client is
- operating in:
+ the output of ls
and dir
commands) requires
+ a second data connection. The data
+ connection is dependent on the mode that
+ the client is operating in:
@@ -104,7 +104,7 @@
You can see these commands in action using your linux ftp
command-line client in debugging mode. Note that my ftp client defaults to
passive mode and that I can toggle between passive and active mode by
- issuing a "passive" command:
+ issuing a passive
command:
[teastep@wookie Shorewall]$ ftp ftp1.shorewall.net
Connected to lists.shorewall.net.
@@ -185,10 +185,10 @@ ftp>
Given the normal loc->net policy of ACCEPT, passive mode access
from local clients to remote servers will always work but active mode
- requires the firewall to dynamically open a "hole" for the
+ requires the firewall to dynamically open a hole
for the
server's connection back to the client. Similarly, if you are running
an FTP server in your local zone then active mode should always work but
- passive mode requires the firewall to dynamically open a "hole"
+ passive mode requires the firewall to dynamically open a hole
for the client's second connection to the server. This is the role of
FTP connection-tracking support in the Linux kernel.
@@ -198,9 +198,9 @@ ftp>
function.
Including FTP connection-tracking and NAT support normally means
- that the modules "ip_conntrack_ftp" and "ip_nat_ftp" need
- to be loaded. Shorewall automatically loads these "helper" modules
- from /lib/modules/<kernel-version>/kernel/net/ipv4/netfilter/
+ that the modules ip_conntrack_ftp
and ip_nat_ftp
+ need to be loaded. Shorewall automatically loads these helper
+ modules from /lib/modules/<kernel-version>/kernel/net/ipv4/netfilter/
and you can determine if they are loaded using the 'lsmod'
command. The <kernel-version> may be obtained
by typing