Le sam 06/03/2004 à 20:44, Rune a écrit : > All you need is having a forward rule for the ftp-data connection which > uses the > port below the ftp port e.g: > ftp at port 21 > ftp-data at port 20 Nope. This is true for _active_ FTP, but passive ftp-data connection uses non privilieged ports on both ends. -- Cédric Blancher <blancher@cartel-securite.fr> Consultant en sécurité des systèmes et réseaux - Cartel Sécurité Tél: +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99 PGP KeyID:157E98EE FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE