-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Denis,

I am sorry, I overlooked that particular line which you mentioned that
"ip_masq_ftp" works well. However, when you use the normal FTP client
from Linux/*ix or even M$ Windows text based FTP client, it will not
work. You need to use an FTP client like IGLOO on Linux which is an
X-window (GUI) client or try to use WsFTP on Windows with
(passive/firewall) mode enabled.

- --Moonshi

> -----Original Message-----
> From: Denis Chapligin [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, July 28, 1999 8:09 PM
> To: Moonshi Mohsenruddin
> Cc: Glynn Clements; [EMAIL PROTECTED]
> Subject: RE: ip_masq_ftp is not working
>
>
> Hi
>
> On Wed, 28 Jul 1999, Moonshi Mohsenruddin wrote:
>
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi guys,
> >
> > Using IPFWADM on Linux based on kernel 2.0.3x ; I have came out with
> > rules that could be easily deployed and it is also hosted online at
> > http://linux.s-one.net.sg
>
> > > > > >
> > > > > > # modprobe ip_masq_ftp
> > > > > >
> > > > > > should solve it.
> > > > >
> > > > > ip_masq_ftp is loaded okay. But it doesn't works.
> > > >
> > > > Do you have any firewall rules which would block inbound TCP
> > > > connections to ephemeral ports? If so, then you will have to use
> > > > passive (PASV) mode instead (where the client creates the data
> > > > connection).
> > > >
> > > >
> > > I have only one rule? that disables outgoing connections to
> > > port 80 on any
> > > host. And my clietns software does not support passive mode:(
> >
> >
> >
> Im using kernel 2.2.9 and ipchains. And(as i says at beginnig
> of thread)
> all works fine, so this is not configuration problem.
>                                               Denis Chapligin
>
>
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.0.2i

iQA/AwUBN56dumefe0TVuy5lEQKtFwCgxSdyKpaAlW+F2pFDN40x+IqKIiMAoOxN
OGwEaWLTJkXWcDE3tySC3mZa
=7ZDE
-----END PGP SIGNATURE-----


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to