> 
> 
> On 12 May 99, at 9:45, David A. Ranch wrote about
>     "Re: [Masq]  Re: please help with ip":
> 
> | >| FTP needs the special FTP module and to have port 20 forwarded as well.
> | >
> | >I thought this too at first, but there is no need to set up port 
> | >forwarding for port 20.  The FTP masq module sets up masq entries for 
> | >data ports as needed.
> | 
> | This is specific to your port of IP_MASQ_FTP correct?
> 
> I wouldn't say so.  Certainly it is a moot point for a masqueraded 
> server without my version of ip_masq_ftp.c.  
> 
> But as I understand it, the same issue applies to a masqueraded 
> client in active mode - the data connection is actually opened from 
> the outside, so there would seem to be a need for port forwarding.  
> But there is not, because the ip_masq_ftp module sets up a masquerade 
> entry for the data connection *as if* it had been initiated by an 
> outgoing packet.  So the *actual* first packet, which is incoming, 
> looks to the masquerade code like a reply.
> 

 Fred, this paragraph seems to answer a question I've been wondering
about.  Could you explain to which system this answer applies?
Are you guys talking about a stock 2.2.x system or about a patches
system or about specific kernel modules that you're using but that are
not in wide-spread circulation?

Thanks,

        - Godmar



_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to