/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Rick,
Looking at the IPCHAIN Rule Set you said you used as a template,
there seems to be an error with the Rule for the FTP Masquerading.
Example (error is --j):
ipchains -A good-bad -p tcp --dport ftp --j MASQ
Should be:
ipchains -A good-bad -p tcp --dport ftp -j MASQ
Jef
----- Original Message -----
From: Rick van Valkenburg <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, March 23, 2000 9:54 AM
Subject: Re: [Masq] FTP "cannot make data connection"
> /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
*/
>
>
> >>> Alan Hysinger <[EMAIL PROTECTED] >>>
> >did you run: insmod ip_masq_ftp ?
>
> Yes. I have a run ip_masq_ftp.
> I have also noticed I cannot ftp out from the Linux box unless I flush the
> ipchains -F
>
> I have used a modified version of the "serious example" from Paul
Russell's
> IPCHAIN HOWTO, http://www.linux.org/help/ldp/howto/IPCHAINS-HOWTO-7.html
for
> the ruleset.
>
> Rick van Valkenburg wrote:
>
> >
> > I get the same "425" error making a connection to an ftp server from
behind
> the linux box. Is this what ipmasqadm port-forwarding is supposed to be a
> work-around for?
> >
> > I'm doing it from a red-hat 6.0 kernel 2.2.5-15 dist.
> >
> > Rick van Valkenburg
> >
> > >I get these messages when I try to connect to >ftp.sunet.se (a public
ftp)
> >
> > [Cut the stuff above that isn't importaint]
> > >
> > >Using normal mode:
> > >------
> > > [Cut the stuff above that isn't importaint]
> > >257 "/" is current directory.
> > >PORT 192,168,0,2,13,246
> > >200 PORT command successful.
> > >LIST -al
> > >425 Can't open data connection.
> > -------------------------------------------------------------
> >
> > >And I found out, it doesn't matter if I use the >ip_masq_ftp module or
not.
> :-(((
> > >
> > >Anybody here know why? And/or any solutions?
> > >
> > > Elector^NPS
> > > [EMAIL PROTECTED]
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
