Hi there,
I'm running a FTP server in DMZ zone and I can transfer files in
active/passive mode from local zone, but not from net. If I try it from
net only works passive FTP mode, in active mode I get a 'connection time
out' error after the PORT ftp command.
I'm running shorewall 4.0.6, and nf_conntrack_ftp and nf_nat_ftp are
loaded (kernel 2.6.24).
Could someone tell me how to set correctly the rules file to enable
active FTP? Now I have these rules:
ACCEPT loc dmz:$FTP_SERVER tcp ftp
DNAT net dmz:$FTP_SERVER tcp ftp
- $FW_EXTERNAL
FTP/ACCEPT dmz net
Thanks!
--
Aquest missatge ha estat analitzat per MailScanner
a la cerca de virus i d'altres continguts perillosos,
i es considera que està net.
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users