Gabriel Gonzalez Cano wrote: > Hi there, > I'm running a FTP server in DMZ zone and I can transfer files in > active/passive mode from local zone, but not from net. If I try it from > net only works passive FTP mode, in active mode I get a 'connection time > out' error after the PORT ftp command. > > I'm running shorewall 4.0.6, and nf_conntrack_ftp and nf_nat_ftp are > loaded (kernel 2.6.24). > > Could someone tell me how to set correctly the rules file to enable > active FTP? Now I have these rules: > > ACCEPT loc dmz:$FTP_SERVER tcp ftp > DNAT net dmz:$FTP_SERVER tcp ftp > - $FW_EXTERNAL > FTP/ACCEPT dmz net
http://www.shorewall.net/FTP.html -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
