weel, it seems all to be a SuSEfirewall2 documentation problem. When a server if behing a gateway, with no public IP, it needs masquerading. ftp needs two ports (ftp and ftp-data), but passive mode needs a lot of upper ports. these ports needs to be masqueraded also. How to achieve this was not clear, as the YaST interface do not accept port range (or I didn't discover the range syntax). so one have to dig into the /etc/sysconfig/SuSEfirewall2 file *of the gateway*. to do this you have to insert a line like this one: notice, after the "=" there is a ", closed at the very end of the config. This is to say that SuSEfirewall2 uses space or carriage return as separator. Like you see them, these instructions are for http (80) and ftp (the three others) FW_FORWARD_MASQ="0/0,192.168.56.101,tcp,80 0/0,192.168.56.101,tcp,21 0/0,192.168.56.101,tcp,20 0/0,192.168.56.101,tcp,30000:30100" of course these ports have also to be openned on the server I was thinking I had done it, but did not use the right variable, only opening the ports, not forwarding them. the most curious is that "ftp" worked, despite the bad config, when filezilla and dolphin didn't. now all seems to work ok. jdd NB: test account is removed -- http://www.dodin.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org