-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris Ross wrote:
|
| For some time now, I've had problems getting IPv6 FTP working through my IPfilter (4.1) firewall. I'm not quite sure what I've done wrong, but I'm sure a configuration setting could be adjusted to fix it.
| ...
| When a machine tries to establish an FTP connection over IPv6, it works, until it attempts to start a transfer. This evening, the FTP client explained:
|
| 229 Entering Extended Passive Mode (|||63935|)
| 150 Opening BINARY mode data connection for file.gz (208102 bytes).
| 0% | | 0 0.00 KiB/s --:-- ETA^C
|
| It never goes anywhere, and I interrupt it. IPv4 connections to the same foreign host for the same file work, however.
|
| My ipnat.conf sets up mappings for the IPv4 networks I want to be able to FTP through the [internal] FTP proxy:
| ...
| Should I do something similar for IPv6? I'm not NAT'ing IPv6, however, so I didn't assume I needed as much. I think it's just a filtering issue.
|
| Is there some smarts needed to auto-open the returns for FTP data transfers for IPv6 through ipfilter?

Is there a filtering rule that should let the connection through for IPv6?

The proxy handles both address translation as well as creating state to
allow the data connection through.

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpS7RIACgkQP7JIXtvLbFVv2QCgpabA3T4r0qX+9wMWN7UoVXX8
aFYAn1NNcYm5FF6JclIsgOQxeBRYv95y
=nr4/
-----END PGP SIGNATURE-----

Reply via email to