On 16 May 99, at 12:37, Godmar Back wrote about
"Re: [Masq] Re: please help with ip":
| > On 12 May 99, at 9:45, David A. Ranch wrote about
| > "Re: [Masq] Re: please help with ip":
| >
| > | >| FTP needs the special FTP module and to have port 20 forwarded as well.
| > | >
| > | >I thought this too at first, but there is no need to set up port
| > | >forwarding for port 20. The FTP masq module sets up masq entries for
| > | >data ports as needed.
| > |
| > | This is specific to your port of IP_MASQ_FTP correct?
| >
| > I wouldn't say so. Certainly it is a moot point for a masqueraded
| > server without my version of ip_masq_ftp.c.
| >
| > But as I understand it, the same issue applies to a masqueraded
| > client in active mode - the data connection is actually opened from
| > the outside, so there would seem to be a need for port forwarding.
| > But there is not, because the ip_masq_ftp module sets up a masquerade
| > entry for the data connection *as if* it had been initiated by an
| > outgoing packet. So the *actual* first packet, which is incoming,
| > looks to the masquerade code like a reply.
|
| Fred, this paragraph seems to answer a question I've been wondering
| about. Could you explain to which system this answer applies?
| Are you guys talking about a stock 2.2.x system or about a patches
| system or about specific kernel modules that you're using but that are
| not in wide-spread circulation?
Yes. :)
David's original comment was about port forwarding needed when you
are masquerading and FTP *server*. His comment and my reply would
apply equally to 2.0 and 2.2 kernels.
However. masquerading a server is not supported by Linux out of the
box, so a patch is required (in addition to the port-forwarding
patch). I wrote such a patch for 2.0.3x kernels, which is available
via David's IP_MASQ HowTo. See the HowTo for details. The FTP
server patch is 2.0 specific.
- Fred Viles <mailto:[EMAIL PROTECTED]>
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
