Try modprobe ip_masq_ftp I think that you forgot this only ... Regards ... Sp0oKeR

---------- Início da mensagem original ----------- De: Christian Uhde <mail@christian-uhde.de> Para: suse-security@suse.com Cc: Data: Mon, 21 May 2001 23:17:50 +0200 Assunto: Re: AW: [suse-security] ipchains masq +

Hi! I think you need the module ip_masq_ftp.o to masquarade active ftp with ipchains, aren't you? So it works fine for me. Perhaps take a look at http://www.linux-firewall-tools.com/linux/.

Hope thats you are looking for!

Christian

Am Montag, 21. Mai 2001 10:09 schrieben Sie:

...

Hi!

...

...

I want to use active-ftp with some clients behind my gateway-pc (ipchains-masquerading)... (passive ftp works) How do I configure my ipchains-firewall to allow

active ftp this?

...

...

...

I hope someone can help me...

PS> Deconfigure all passive ftp components and open your firewall for PS> tcp/20,21,1024:

That didn't work for me... I have "allow-all-rules" for input, ouput and forward and I didn't deny tcp/20,21,1024...

I have just deny-rules for some ports and one forwarding rule: ipchains -A forward -s 0.0.0.0/0.0.0.0 -d ! 192.168.0.0/255.255.0.0 -j MASQ

With this I can do passive ftp - but active ftp sucks... :-(

Bye.

-----------------------------------------------------

...

To unsubscribe, e-mail: suse-security- unsubscribe@suse.com For additional commands, e-mail: suse-security- help@suse.com

-------------------------------------------------------

To unsubscribe, e-mail: suse-security- unsubscribe@suse.com For additional commands, e-mail: suse-security- help@suse.com

Sp0oKeR - NsC spooker@bol.com.br Powered By Linux - SuSe & Slackware __________________________________________________________________________ Acesso pelo menor preço do mercado! R$ 14,90 nos 3 primeiros meses! ASSINE AGORA! http://www.bol.com.br/acessobol/