At 23:41 +0300 on 22/6/2003, Aviram Jenik wrote:


There's still not enough info about your network to really help you out. Could
you explain your set up exactly? Are you using a NAT gateway machine or
connecting directly from the Linux? Did you make any MTU changes on your
"other" OS that you didn't make on Linux? Did you try to load the ftp
connection tracking modules (ignoring Shachar's comment about stateful
inspection thingies) just to see if they solve the problem?

I only have ADSL for three days now... Before that, the Linux was simply used as a local development server, and wasn't connected to the Internet.


To answer those of your questions which I can:

I have a Linux machine with two network cards, which serves as the NAT gateway. eth0 is connected to the hub, eth1 to the modem.

eth0 is set up static, 192.168.1.1.
eth1 is set up to use DHCP (to get the real IP from the modem).
ppp0 is set up with rp_pppoe

No, I didn't make any changes at all to anything on the "other" OS, because frankly, I only installed ADSL on it for half an hour to see whether the passive ftp works or not, and used the default setup. That other OS is *not* Windows, I'm using PPC.

Everything else, as I said in my first message, is stock mandrake. That is, the firewall is shorewall. It basically allows everything outgoing, allows everything coming from the local network, and disallows everything incoming, except http and ssh which I opened.

Note that passive ftp doesn't work even when I shut down shorewall, although everything else - including active ftp - works then, because the machine is basically open to all winds.

No, it didn't work before - as I said, I only had ADSL for a couple of days. Everything else is working great. The part I got stuck in was attempting to access security updates - that's done in passive FTP.

As for the ftp connectivity modules - I haven't looked at it. I'll look into it tomorrow.

Herouth
--
EMAIL: [EMAIL PROTECTED]
HOME PAGE: http://herouth.port5.com/

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Reply via email to