Hi I do DNAT with only one rule: iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j SNAT --to xxx.xxx.xxx.xxx The host whose IP is 192.168.1.2 in NAT can use ftp(passive mode) in this condition,in which there are only two modules working------ip_tables.o and iptable_nat.o. I don't know what's the function of ip_nat_ftp and ip__conntack_ftp module. IF I don't use the rule above,ftp can't work even I insmod them. Then what's the function of them? Thanks luoqiang
