On Fri, 1 Aug 2003, Olivier Nicole wrote:

> > The FTP proxy works fine on a
> > Bridging firewall without any ip-address including Active mode.
> 
> Is that with a client inside the firewall or with a server inside the
> firewall?
> 

Without defining the network configuration the short answer is yes!

There is of course a caveat. The transparenet firewall is on the Internet
side of the network. If you have a router which NAT's the LAN
traffic before it makes its way to the Internet the router will need to
support Active ftp too!

> In any case I did not succeed to configure (but i did not try too hard).
> 

Assuming rl1 is the ethernet interface to the Internet the following rule
would apply:

map rl1 0/0 -> 0/0 proxy port ftp ftp/tcp

There, thats it!

Larry.

Reply via email to