hi! S> You can use ipchains with kernel 2.4 . You should recompile your S> kernel with ipchains support ou for just tests, insmod ipchains. I do S> the second option to tests and my ipchains work very well. I know that I can use ipchains with kernel 2.4.x but it seems to me (right or not?) that I cannot use this special ipchains-module "ip_masq_ftp.o" with kernel 2.4.x ...

...

Hi!

CU> I think you need the module ip_masq_ftp.o to masquarade active ftp with CU> ipchains, aren't you? So it works fine for me. Perhaps take a look at CU> http://www.linux-firewall-tools.com/linux/.

CU> Hope thats you are looking for!

CU> Christian

..ip_masq_ftp.o would be a good solution, but it seems to me that it just works with kernel 2.2.x and not with 2.4.x .. !? If there is a possibilty to use it with 2.4.x (ipchains-compatibility) I would like to know about... Meanwhile I also took a look at Netfilter/Iptables and set up a masquerading-rule that works fine so far... but I have the same ftp-problem: ;-) How can I realize active ftp-connections from the clients behind a netfilter/iptables-gateway-pc?

Bye.