On 16 May 99, at 12:34, Godmar Back wrote about
"[Masq] active ftp and incoming con":
|...
| I did experience problems with ftp, specifically ftp:// URLs in netscape,
| which confused me. I had suspected that it had to do with the two ftp
| modes, active and passive. My question is this: how does it work
| in a stock 2.2.6 kernel?
It should work just fine, in 2.0 or 2.2 kernels.
| a) Does an internal client have to be put in passive mode so that the
| ftp module at the gw will work?
No. PASV mode is the one that works (mostly) even if you *don't*
have the ip_masq_ftp module loaded. The module is needed to support
active mode, and long file transfers.
| b) Or, can the ftp module handle active mode connections as well, in which
| case the internal clients could be oblivious to the issue.
Yes.
| If the answer is a), then the follow up question would be: does anybody
| know how to tell Netscape to use passive mode for ftp:// URLs.
The answer wasn't a), but this question puzzles me. At least on the
PC, I can't find any way to get web browsers (NS and IE) to use
*active* mode for FTP. They *always* use passive mode.
|...
| Specifically, I am trying to get incoming connections to work.
Incoming connections for what?
| Should I try the "ipmasqadm" command?
| If I do, I get
|
| > [root@c80384-a rc.d]# ipmasqadm portfw -l
| > portfw: setsockopt failed: Invalid argument
| > Could not open "/proc/net/ip_masq/portfw"
| > Could not open "/proc/net/ip_portfw"
| > Check if you have enabled portforwarding
Did you?
| What could be wrong? Do I need to apply kernel patches or should
| this work with a plain 2.2.6 kernel?
No patches are needed for port forwarding in general, it is build in
in the 2.2 kernels. But it does need to be enabled, just like IP
forwarding. I'm running 2.0.36, so I can't tell you specifically how
to do that.
OTOH, port forwarding alone is not enough to let you run a masqed FTP
server. You'd also need a trivial kernel patch and a re-write of the
ip_masq_ftp module similiar to the one I did for the 2.0 kernels.
- Fred Viles <mailto:[EMAIL PROTECTED]>
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
