Insert per-protocol masquerading modules.
you need to insert the masquerading module for FTP, so that
active and passive FTP `just work' from the internal network.
# insmod ip_masq_ftp
#
>From: Martin Krzywinski <[EMAIL PROTECTED]>
>To: Vanc Linux Group <[EMAIL PROTECTED]>,
>[EMAIL PROTECTED], [EMAIL PROTECTED],
>[EMAIL PROTECTED]
>Subject: IP Chains and port forwarding
>Date: Wed, 25 Aug 1999 19:07:03 -0700 (PDT)
>
>
>I'm starting to fiddle with ipchains. I'm masquarading
>
> router --- [x.x.199.193]FIREWALL[10.1.1.1] --- private network
>
>A few things aren't working. For example, I can't ftp out of the private
>clients. The connection is made but the server complains about port
>numbers. I guess there's something screwy in the masquerading setup.
>Telnet and browsing work fine. Http downloads work fine.
>
>I've got
>
> ipchains -A forward -j MASQ
>
>added, but just that for now.
>
>In addition, I'd like to have internal web/ftp/ssh servers. How can I
>forward requests to x.x.199.194 on a given port, say 23, to go to
>10.1.1.Y:23?
>
>Thanks for any info,
>
>Martin
>
>--------------------------------------------
> And I keep hearing from the cellar bin
> The rumbling sound
> Of load on load of apples coming in.
> For I have had too much
> Of apple-picking: I am overtired
> Of the great harvest I myself desired.
> Robert Frost (After Apple-Picking)
>--------------------------------- 575/1424 -
>
>
>
>
_______________________________________________________________
Get Free Email and Do More On The Web. Visit http://www.msn.com
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]