Ftp, Iptables and masquerade

[fr ml <frml2@caramail.com>]

Hello,

I've tried to masquerade my private Lan from the outside,
but I've got problems for ftp (port 21).

At first, I've tried such a rule (where eth0 is private and
eth1 public):
iptables -t nat -A POSTROUTING -o eth1 -s private_lan
 -d 0.0.0.0/0 -p tcp -m state
 --state NEW,ESTABLISHED,RELATED -j MASQUERADE


with no success, the packet send are quite masquerade, but
the reply are still using the original non-masquerade ip
address.

Thanks for your comments and help.

Fabian


______________________________________________________
Boîte aux lettres - Caramail - http://www.caramail.com