I was probably a bit unclear in my question, sorry. I believe ip_masq_ftp is only used for enabling FTP clients on the internal (192.168.1.0) network to connect to an FTP server on the external (internet in my case) network. Please correct me if I am wrong.
What I want, is a way for people on internet to be able to connect (both active and passive) to my FTP server. And my FTP server (192.168.1.13) is located on the internal network. With portforwarding, it is possible to make both active and passive connections. But with passive it is not possible to fetch any data. I believe this is becasue my firewall (192.168.1.1) is not accepting the FTP servers request to open a new port. Can I make a ipchains rule to allow this? // Daniel ----- Original Message ----- From: "Jose Celestino" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Thursday, December 20, 2001 1:00 PM Subject: Re: your mail > Read this: > > http://www.linuxdoc.org/HOWTO/IP-Masquerade-HOWTO/x2423.html > > And also consider using a subject on the next post. Subject-less > messages suck. > > Thus spake -=dara=-, on Wed, Dec 19, 2001 at 09:19:12PM +0100: > > Hi! > > > > I'm a newbie, have patience. > > > > I'm using debian as a firewall/gateway with masquerading. And i want to be able to connect to an internal FTP from outside (internet). Do I have to use a ftp-gateway (such as http://www.mcknight.de/jftpgw/) or is it possible to configure debian to make it work? > > > > I'm using debian 2.2.19. ipchains for masq'ing and portfw for portforwarding. i have forwarded port 20 and 21 so it is possble to connect to the ftp but not to 'ls' or anytning. > > > > Any links, documents etc. is appreciated! But a really detailed description would be great. > > > > // Daniel > > Sweden > > -- > Jose Celestino <[EMAIL PROTECTED]> > --------------------------------- > Operators on strike due to broken coffee machine. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > >
