Passive FTP Problem in NAT.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi.

Could someone help me or give me advice regarding NAT on a FTP server located in my DMZ.

This is my setup :

My Firewall(Linux 2.4.22-1) :
|
- eth0 = Public Interface (x.x.x.66 / 26 )
|
- eth1 = DMZ Interface (172.16.100.254 / 24 )
|
- eth2 = My Internal Network ( 192.168.1.1 / 24 )


I have a FTP server located on my DMZ Network. The server is listening on a ?non-standard? ftp port. It listens on port : 2121.

To generate my firewall config I use FwBuilder. I?ve tried many configurations but, I never get the data port to open( e.g. to list a directory)

In my configuration I?ve allowed, and NAT?ed the following services to my FTP server located on the DMZ  :

FTP 		= 	TCP Destination Port : Start : 2121 ? End : 2121
FTP_DATA	=	TCP Source Port : Start : 20 ? End : 20
			        Destination : Start : 1024 ? End : 65535

I can connect, but cannot list the directories.

p.s. I?m running Proftpd on my FTP server. I have also tried to configure the ?PassivePorts= 60000 65534? to configure a group of the passive ports.
But it?s the same issue with the directory listening.

Any help would be much appreciated.


Best regards to all, 

Svavar O
Reykjavik - Iceland

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux