You also might want to pass and redirect tcp port 20 (ftp data).. this seems to work very well for me.. also.. what FTP client are you using? You might want to use PASV FTP options

T
----- Original Message ----- From: "eric wyzerski" <[EMAIL PROTECTED]>
To: <freebsd-questions@freebsd.org>
Sent: Monday, January 31, 2005 12:11 PM
Subject: Ftp behind firewall/nat



Hi,

For a whole day I tried to make an ftp who is behind the firewall to work but Im not able. My ipf rules are:

pass in quick from any to any
pass out quick from any to any

So it is not a ipf problem. My ipnat rules are:

map rl0 10.0.0.0/8 -> 0/32

rdr rl0 X.X.X.X/32 port 21 -> 10.1.1.6 port 21 tcp

where X.X.X.X is my external IP, rl0 my external interface and 10.1.1.6 the ftp server. I am able to login and when I do the dir command its freeze. I have do tcpdump and I see the SYN packet goes but its never get answer. I really need help/advise
Thank you and please CC me the answer because im not in the list
Eric


_________________________________________________________________
Take advantage of powerful junk e-mail filters built on patented Microsoft® SmartScreen Technology. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.


_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"




_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to