On Saturday 24 July 2004 11:05 am, Askar Ali Khan wrote: > Hi > > On my router/firewall which acting i am getting problem while anyone > tries to connect to ftp server he connected successfully however when > he types and command for example "ls" ftp server return error "500 > Illegal PORT range rejected" > Everything else is working fine. I see you are doing NAT on this firewall. Do you have the nat_ftp support module loaded or compiled in to your kernel? Without that module, netfilter will not see the PORT commands in the FTP packets, and will not know what to do with the data connection on port 20 associated with the control connection onn port 21. Regards, Antony. -- "The joy of X!!?? I've always hated compiling graphical shite. You have a 10 line program, and it ends up depending on the entire known universe." - Philip Hands Please reply to the list; please don't CC me.