Ftp behind firewall/nat

2005-01-31 Thread eric wyzerski
Hi, For a whole day I tried to make an ftp who is behind the firewall to work but Im not able. My ipf rules are: pass in quick from any to any pass out quick from any to any So it is not a ipf problem. My ipnat rules are: map rl0 10.0.0.0/8 -> 0/32 rdr rl0 X.X.X.X/32 port 21 -> 10.1.1.6 port 21 t

RE: Ftp behind firewall/nat

2005-01-31 Thread Andras Kende
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of eric wyzerski Sent: Monday, January 31, 2005 2:11 PM To: freebsd-questions@freebsd.org Subject: Ftp behind firewall/nat Hi, For a whole day I tried to make an ftp who is behind the firewall to work but

Re: Ftp behind firewall/nat

2005-01-31 Thread Thomas Foster
uary 31, 2005 12:11 PM Subject: Ftp behind firewall/nat Hi, For a whole day I tried to make an ftp who is behind the firewall to work but Im not able. My ipf rules are: pass in quick from any to any pass out quick from any to any So it is not a ipf problem. My ipnat rules are: map rl0 10.0.0.0/8

Re: Ftp behind firewall/nat

2005-01-31 Thread eric wyzerski
this Ip for the ip of me routeur via ipnat command? Thanks! Eric From: "Thomas Foster" <[EMAIL PROTECTED]> To: "eric wyzerski" <[EMAIL PROTECTED]>, Subject: Re: Ftp behind firewall/nat Date: Mon, 31 Jan 2005 14:24:15 -0800 You also might want to pass and redirect tc

Re: Ftp behind firewall/nat

2005-01-31 Thread Erik Norgaard
Andras Kende wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of eric wyzerski Sent: Monday, January 31, 2005 2:11 PM To: freebsd-questions@freebsd.org Subject: Ftp behind firewall/nat Hi, For a whole day I tried to make an ftp who is behind the

Re: Ftp behind firewall/nat

2005-01-31 Thread eric wyzerski
r (ipnat)? Thanks Eric From: Erik Norgaard <[EMAIL PROTECTED]> To: Andras Kende <[EMAIL PROTECTED]> CC: 'eric wyzerski' <[EMAIL PROTECTED]>,freebsd-questions@freebsd.org Subject: Re: Ftp behind firewall/nat Date: Tue, 01 Feb 2005 00:07:15 +0100 Andras Kende wrote: --

Re: Ftp behind firewall/nat

2005-02-01 Thread Dick Hoogendijk
On 31 Jan eric wyzerski wrote: > The solution is to explicitly tell your FTP server what to report as its > IP address, and give it a range of ports to give out as well. > unix-server configuration file as follows: passive ports > 0.0.0.0/0 32768 49151 > passive address your.pub.IP.addr 0.0.0.0/

Re: Ftp behind firewall/nat

2005-02-01 Thread Erik Norgaard
eric wyzerski wrote: My setup work wells with Active ftp but not with passive ftp. Your setup doestnt work with passive ftp. From ipfilter faq: # I have an FTP server behind an IPF firewall, and I'm having problems serving passive FTP. Sorry, from your original post it was not clear to me if your