On 5 May 99, at 17:27, Sean Roe wrote about
"[Masq] FTP Stuff":
| I have an ftp server behind my MASQ box and I want to be able to ftp to both
| machines on different ports. I can ftp to the MASQ box but I cant ftp to the
| other box.
What happens when you try?
| Here is a copy of my fw ruleset:
|...
|
| /usr/local/sbin/ipportfw -C
| #/usr/local/sbin/ipportfw -A -t$extip/2112 -R $portfwip/21
| /usr/local/sbin/ipportfw -A -t$extip/26 -R $portfwip/23
Does telnet work on port 26?
| /usr/local/sbin/ipportfw -A -t$extip/80 -R $portfwip/80
| /usr/local/sbin/ipportfw -A -t$extip/28 -R $portfwip/23
Or port 28?
| /usr/local/sbin/ipportfw -A -t$extip/443 -R $portfwip/443
| /usr/local/sbin/ipportfw -A -t$extip/210 -R $portfwip/21
So the external client is trying to connect to port 210, and you're
forwarding that to port 21 on the internal box. Hmmm, there may be a
couple of issues there. For example, assuming the forwarding is
working, the replies from the server will have source port 21 while
the client is expecting 210.
Why don't you eliminate a variable and forward port 21. If that
works, try forwarding 210 *to* 210, and configure your masqed server
to listen on 210. If that works, and assuming you've applied the
patches David pointed you at, you'll also have to tell the
ip_masq_ftp module to bind itself to port 210.
- Fred Viles <mailto:[EMAIL PROTECTED]>
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
