On Tue, Aug 2, 2011 at 2:12 PM, Jesse Young <jesse.young@xxxxxxxxx> wrote: > On Tue, Aug 2, 2011 at 1:37 PM, Philipp <hollunder@xxxxxxxxxxx> wrote: >> Problem: A server situated in a network that can't be reached from the >> outside, all ports are blocked. I want to give specific outside users >> simple ftp access to a directory on this server (password protected). >> >> I'm in control of the server inside the network. I'm in >> control of another server inside this network that can be reached (at >> least port 80) but I'd like to avoid using this server. > > If there is no webserver on this port you could DNAT to the FTP > server. If there is you could consider running WebDAV instead of FTP, > and using a reverse proxy to forward the traffic to the inside box on > a certain resource. > >> I may have some control over outside servers. > Set up a VPN tunnel between the two machines and DNAT a port from the > outside server to the firewalled box. > > Hope this gives you some ideas. ^^^^^^^^^^^^^^^^^^^^ webdav would be perfect in this situation, and is probably the best/most "correct" solution you have. C Anthony