Is the nat-ftp-helper module loades? insmod ip_nat_ftp Arthur Meyer On Wednesday 15 September 2004 16:51, Svavar Örn Eysteinsson wrote: > Hi. > > Could someone help me or give me advice regarding NAT on a FTP server > located in my DMZ. > > This is my setup : > > My Firewall(Linux 2.4.22-1) : > > - eth0 = Public Interface (x.x.x.66 / 26 ) > > - eth1 = DMZ Interface (172.16.100.254 / 24 ) > > - eth2 = My Internal Network ( 192.168.1.1 / 24 ) > > > I have a FTP server located on my DMZ Network. The server is listening > on a "non-standard" ftp port. It listens on port : 2121. > > To generate my firewall config I use FwBuilder. I've tried many > configurations but, I never get the data port to open( e.g. to list a > directory) > > In my configuration I've allowed, and NAT'ed the following services > to my FTP server located on the DMZ : > > FTP = TCP Destination Port : Start : 2121 - End : 2121 > FTP_DATA = TCP Source Port : Start : 20 - End : 20 > Destination : Start : 1024 - End : 65535 > > I can connect, but cannot list the directories. > > p.s. I'm running Proftpd on my FTP server. I have also tried to configure > the "PassivePorts= 60000 65534" to configure a group of the passive ports. > But it's the same issue with the directory listening. > > Any help would be much appreciated. > > > Best regards to all, > > Svavar O > Reykjavik - Iceland -- This email was created using 100% recycled electrons.