Craig M. Nicholson wrote:

> 
> Surely if the connection is tracked and marked then the reply packets
> should go out of the interface that the request came in on?
> 
> Any ideas anyone?
> 

Craig,

Sorry -- I can't comment without seeing a 'shorewall dump' collected as
described in great detail at http://www.shorewall.net/support.htm#guidelines. 
Also:

a) Why are you specifying 'loose'?
b) Where does this FTP server run? The firewall? In a local network?
c) Is it the responses to the control connection (TCP port 21) that go out via
ppp0 or is it active mode connections from the server back to the client that go
out via ppp0?

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to