On Wed, 2004-09-15 at 11:13, svavar@xxxxxxxxx wrote: > Hi. > > Could someone help me or give me advice regarding NAT on a FTP server located in my DMZ. > > This is my setup : > > My Firewall(Linux 2.4.22-1) : > | > - eth0 = Public Interface (x.x.x.66 / 26 ) > | > - eth1 = DMZ Interface (172.16.100.254 / 24 ) > | > - eth2 = My Internal Network ( 192.168.1.1 / 24 ) > > > I have a FTP server located on my DMZ Network. The server is listening on a non-standard ftp port. It listens on port : 2121. bingo. the standard modprobe commands won't work in your situation. try: modprobe ip_conntrack_ftp ports=21,2121 modprobe ip_nat_ftp ports=21,2121 to force the helper to watch your specific port. -j -- Jason Opperisano <opie@xxxxxxxxxxx>