Re: common FTP+NAT problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Ernesto, hi everybody,

_fwd="iptables -A FORWARD"
_nat="iptables -A POSTROUTING"

Postrouting is in the nat table, so you have to add "-t nat" to _nat and make it
   _nat="iptables -t nat -A POSTROUTING"

I'm having a problem to access internet ftp servers from my internal network. I understand the ftp connection but I don't have enough information about ip_conntrack_ftp and ip_nat_ftp modules, so here is my situation.

Apart from that you will need more rules for FTP, that's the tricky part. What worked well for me was using vsftpd with a port specifiaction for the data connections and allow these ports in INPUT|FORWARD. It may work using the ftp conntack module, but I don't know anything about that. You will have to add some port 20 rule, though.

Baltasar

--
Baltasar Cevc

_____ former 03 gmbh
_____ infanteriestraße 19 haus 6 eg
_____ D-80797 muenchen

_____ http://www.former03.de




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux