Emmanuel, would you consider to continue this conversation in English, as many subscribers do not talk German? I hope this does not mean any inconvenience for you. Thank you. On Fri, 14 Jan 2000 Emmanuel.Granges@swisscom.com wrote:

Hallo Allerseits

Ist der FTP-Proxy in der Lage Masquerading selbst zu machen oder muss ich die Firewall so konfigurieren, dass bei outbound Traffic die Firewall alle Verbindungen an ensprechende Ports (21) umleitet, nachdem die Firewall selbst Masquerading (Ersatz der internen IP durch die Firewall-IP) bereits durchgeführt hat?

As I see it now, the second way is the proper one. Bus as I have no experience with masquerading, I would like to discuss this with colleagues who do know. I will do that after I return from a business trip next week.

Muss der FTP-Proxy den Server (Parameter "Listen") für Outbound-Verkehr auf dem internen Interface starten?

Yes, it has to. For outbound FTP traffic things are not so easy, I guess. Please look at the "AllowMagicUser" config option. Outbound FTP is most probably only usable for users with an FTP client, not with a browser.

Grüsse

Emmanuel A. Granges

Volker -- Volker Wiegand Phone: +49 (0) 6196 / 50951-24 SuSE Rhein/Main AG Fax: +49 (0) 6196 / 40 96 07 Mergenthalerallee 45-47 Mobile: +49 (0) 179 / 292 66 76 D-65760 Eschborn E-Mail: Volker.Wiegand@suse.de ++ Only users lose drugs. Or was it the other way round? ++