Thanks. The Xensource article you referenced has provided a hint but no resolution. It appears the commercial Xensource PV drivers for Windows do not provide a valid checksum. jlm -----Original Message----- From: netfilter-owner@xxxxxxxxxxxxxxx [mailto:netfilter-owner@xxxxxxxxxxxxxxx] On Behalf Of G.W. Haywood Sent: Wednesday, January 02, 2008 5:15 AM To: netfilter@xxxxxxxxxxxxxxx Subject: Re: Passive FTP Client fails connecting to Server behind IPTABLES Hi there, On Tue, 1 Jan 2008, John L. Magee wrote: > >> I do see all kinds of related commentary while googling but none > >> that have any solutions for me. If ip_contrack_ftp and ip_nat_ftp > >> are supposed to manage this, they are not. > > > >Does this help? > > > >http://securepoint.com/lists/html/NetFilter/2006-11/msg00209.html > > No. It is similar but seems to be the reverse situation. This then? http://lists.xensource.com/archives/html/xen-users/2007-05/msg00980.html > For a server being accessed by a client with Passive FTP, should > ip_nat_ftp alter the inside address to the outside address when > sending the port for the passive data transfer? That is my understanding, yes. -- 73, Ged. - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
