Hi:

There are "address" and "external-address" fields for data connection configuration. In an enterprise setup, I will be mentioning my LB/NAT/Firewall address as "external-address". When an external (outside of enterprise network) client connects to the server and initiates a passive data transfer, the response to "PASV" command would have the "external-address". The client connects to this external address and LB should forward the connect request to the server.

For an internal (within the enterprise network) client, what would be the response to PASV command? Will it have the "external-address" configured? In that case the internal client will be forced to connect to the server through LB/external-address, right? Can this be avoided? Can the response to such client contain server's address?

Can Apache Server detect that the request is coming from an internal client and send back the "address" instead of "external-address" in response to PASV command.

Thanks,
Nilesh.

Reply via email to