Re: SNAT FTP - HELP ME

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wednesday 09 April 2003 03:35 pm, Breno Cardoso Perucchi wrote:
> Hello,
>
> This is my first mail to the list.
> I've been trying to transport tcp 20:21 to out of my network with SNAT
> iptables -t nat -A POSTROUTING -p tcp --dst 200.200.200.201 --dport 20:21
> -j SNAT --to-source 192.168.2.1

you cannot use DNAT with ftp protocol due to the multi connection protocol.
If you redirect port 21 you redirect only the control connection and not the 
data connection.

Consider using sftp.
bye

xchris



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux