[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: your mail - sorry for empty subject.



I was probably a bit unclear in my question, sorry.

I believe ip_masq_ftp is only used for enabling FTP clients on the internal
(192.168.1.0) network to connect to an FTP server on the external (internet
in my case) network. Please correct me if I am wrong.

What I want, is a way for people on internet to be able to connect (both
active and passive) to my FTP server. And my FTP server (192.168.1.13) is
located on the internal network.

With portforwarding, it is possible to make both active and passive
connections. But with passive it is not possible to fetch any data. I
believe this is becasue my firewall (192.168.1.1) is not accepting the FTP
servers request to open a new port. Can I make a ipchains rule to allow
this?

// Daniel


----- Original Message -----
From: "Jose Celestino" <japc@co.sapo.pt>
To: <debian-firewall@lists.debian.org>
Sent: Thursday, December 20, 2001 1:00 PM
Subject: Re: your mail


> Read this:
>
> http://www.linuxdoc.org/HOWTO/IP-Masquerade-HOWTO/x2423.html
>
> And also consider using a subject on the next post. Subject-less
> messages suck.
>
> Thus spake -=dara=-, on Wed, Dec 19, 2001 at 09:19:12PM +0100:
> > Hi!
> >
> > I'm a newbie, have patience.
> >
> > I'm using debian as a firewall/gateway with masquerading. And i want to
be able to connect to an internal FTP from outside (internet). Do I have to
use a ftp-gateway (such as http://www.mcknight.de/jftpgw/) or is it possible
to configure debian to make it work?
> >
> > I'm using debian 2.2.19. ipchains for masq'ing and portfw for
portforwarding. i have forwarded port 20 and 21 so it is possble to connect
to the ftp but not to 'ls' or anytning.
> >
> > Any links, documents etc. is appreciated! But a really detailed
description would be great.
> >
> > // Daniel
> > Sweden
>
> --
> Jose Celestino <japc@co.sapo.pt>
> ---------------------------------
> Operators on strike due to broken coffee machine.
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
>



Reply to: