Hi Antony,
>> ># allow ftp control connections outbound
>> > iptables -A OUTPUT -p tcp --dport 21 -j ACCEPT
>>
>> Why only port 21 and not also port 20 (DATA Channel).
>
> Because the first outbound connection from the client to the server will
> always be a control connection, and then replies f
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Earlier in the week, I sent an email describing my troubles getting
NAT to work using IP MASQ. The solution lay with the FORWARD chain,
as suggested and I would like to thank those who provided their
input. :D
-T
-BEGIN PGP SIGN