/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */



Hi, 

I am using RedHat 6.0, kernel 2.2.5.

I have setup ip masquerading for all port/proto and portfw for ftp.

Sample setup:
ipchains -A forward -p tcp -s internal_net -J MASQ
ipmasqadm portfw -a -P tcp -L external_net 21 -R internal_host 21

At first all seemed to work until attempting to connect from the outside
to the internal ftp host using something like Netscape browser.  At this
point it seems that the ftp server sneaks a packet passed the
masquerading and thus the client (browser) tries to continue the
connection with an un-masqueraded ip address.  

Strangely ftp clients using active mode work ok!

Any insight welcome

Thanks PaulB.

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to