Well I'm not sure to tell you the truth. I wonder if binding it to the inet facing ip would fix it. The only this is this would remove the need for nat as you would have the proxy handle all the hand offs. :/
Try this. Kill pftpx (only the one with the -c 21 -f 10.0.0.2 args) Then run this. (replace $inet-address with your inet facing address) /usr/local/sbin/pftpx -b $inet-address -c 21 -f 10.0.0.2 -g 21 If there are any nat rules you created delete them but make sure the firewall holes are open. -----Original Message----- From: Dan Swartzendruber [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 3:29 PM To: [email protected] Subject: RE: [pfSense Support] passive ftp At 12:44 PM 10/10/2005, you wrote: >This is what the man page says for the -f switch. > > -f address > Fixed server address. The proxy will always connect to the >same > server, regardless of where the client wanted to connect to > (before it was redirected). Use this option to proxy for a > server behind NAT, or to forward all connections to another > proxy. so, what went wrong, then? it is surely redirecting the tcp session, but the IP addresses in the FTP commands are not being NAT'ed? --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
