Yes, I read that howto before posting here, but I can't see what I'm
doing wrong with the rules configuration, any help is welcome.

Thanks


On Wed, 2010-04-14 at 11:40 -0700, Tom Eastep wrote:
> Gabriel Gonzalez Cano wrote:
> > Hi there,
> > I'm running a FTP server in DMZ zone and I can transfer files in
> > active/passive mode from local zone, but not from net. If I try it from
> > net only works passive FTP mode, in active mode I get a 'connection time
> > out' error after the PORT ftp command.
> > 
> > I'm running shorewall 4.0.6, and nf_conntrack_ftp and nf_nat_ftp are
> > loaded (kernel 2.6.24).
> > 
> > Could someone tell me how to set correctly the rules file to enable
> > active FTP? Now I have these rules:
> > 
> > ACCEPT          loc                     dmz:$FTP_SERVER      tcp     ftp
> > DNAT            net                     dmz:$FTP_SERVER      tcp     ftp
> > -       $FW_EXTERNAL
> > FTP/ACCEPT      dmz                     net
> 
> http://www.shorewall.net/FTP.html
> 
> -Tom
> -- 
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
> 
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
> 


-- 
Aquest missatge ha estat analitzat per MailScanner
a la cerca de virus i d'altres continguts perillosos,
i es considera que està net.


------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to