>On 5 May 99, at 17:27, Sean Roe wrote about
> "[Masq] FTP Stuff":
>
>| I have an ftp server behind my MASQ box and I want to be able to ftp to
both
>| machines on different ports. I can ftp to the MASQ box but I cant ftp to
the
>| other box.
>
>What happens when you try?
It just dies....Here is the output from LeechFTP :
~ Connecting...
~ Connected to 209.180.148.65, waiting for response...
< 220 ethel.desertdocs.com FTP server (Version wu-2.4.2-academ[BETA-18](1)
Mon Jan 18 19:19:31 EST 1999) ready.
> USER sean
< 331 Password required for sean.
> PASS *****
< 230 User sean logged in.
> REST 1
< 350 Restarting at 1. Send STORE or RETRIEVE to initiate transfer.
> REST 0
< 350 Restarting at 0. Send STORE or RETRIEVE to initiate transfer.
> SYST
< 215 UNIX Type: L8
> PWD
< 257 "/home/sean" is current directory.
~ Login completed.
> PORT 192,168,101,70,4,20
< 500 Illegal PORT Command
~ Could not retrieve directory listing for "/home/sean/"
>
>| Here is a copy of my fw ruleset:
>|...
>|
>| /usr/local/sbin/ipportfw -C
>| #/usr/local/sbin/ipportfw -A -t$extip/2112 -R $portfwip/21
>| /usr/local/sbin/ipportfw -A -t$extip/26 -R $portfwip/23
>
>Does telnet work on port 26?
No I turned off port 26....just hadn't taken it out of the ruleset (it is
now)
>
>| /usr/local/sbin/ipportfw -A -t$extip/80 -R $portfwip/80
>| /usr/local/sbin/ipportfw -A -t$extip/28 -R $portfwip/23
>
>Or port 28?
Works as advertised.
>
>| /usr/local/sbin/ipportfw -A -t$extip/443 -R $portfwip/443
>| /usr/local/sbin/ipportfw -A -t$extip/210 -R $portfwip/21
>
>So the external client is trying to connect to port 210, and you're
>forwarding that to port 21 on the internal box. Hmmm, there may be a
>couple of issues there. For example, assuming the forwarding is
>working, the replies from the server will have source port 21 while
>the client is expecting 210.
>
>Why don't you eliminate a variable and forward port 21. If that
>works, try forwarding 210 *to* 210, and configure your masqed server
>to listen on 210. If that works, and assuming you've applied the
>patches David pointed you at, you'll also have to tell the
>ip_masq_ftp module to bind itself to port 210.
>
>- Fred Viles <mailto:[EMAIL PROTECTED]>
>
>
>
>
>_______________________________________________
>Masq maillist - [EMAIL PROTECTED]
>http://tiffany.indyramp.com/mailman/listinfo/masq
>Admin requests can be handled by web (above) or
[EMAIL PROTECTED]
>
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
