[opensuse] Passive FTP behind a MASQ firewall
Hi All, I have am OpenSuSE 10.2 firewall that is masquerading a 10.0.0.0/24 network inside a modemcable Internet connection. I am Forwarding TCP 20 and 21 to 10.0.0.51 as well as TCP 9000-9025 to the same addr. The inside FTP server is a Windows Server box .. (I know .. yuck!). I can connect, send the user and password, but when the outside user issues a 'ls' the server on the inside goes passive and everything dies. I would like to remain with the SuSEfirewall setup, I have done all the RTFM and Google searches .. but unfortunately there is an overwhelming amound of information on old SuSE versions and FTP servers that reside on the Linux box, but I'm more of less stuck on the FTP server inside on a Linux box. Any suggestions? I have to have this up by Thursday evening. Thanks -- Gary B Courriel: gary@b.net GPG Key: 0x4346F013 GPG Fingerprint: BCE8 2E6B EB39 9B23 6904 1DF4 C4E6 2CF7 4346 F013 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Gary Baribault wrote:
Hi All,
Hi Gary,
I have am OpenSuSE 10.2 firewall that is masquerading a 10.0.0.0/24 network inside a modemcable Internet connection. I am Forwarding TCP 20 and 21 to 10.0.0.51 as well as TCP 9000-9025 to the same addr. The inside FTP server is a Windows Server box .. (I know .. yuck!). I can connect, send the user and password, but when the outside user issues a 'ls' the server on the inside goes passive and everything dies.
I would like to remain with the SuSEfirewall setup, I have done all the RTFM and Google searches .. but unfortunately there is an overwhelming amound of information on old SuSE versions and FTP servers that reside on the Linux box, but I'm more of less stuck on the FTP server inside on a Linux box.
Any suggestions? I have to have this up by Thursday evening.
You can use SuSEfirewall option FW_LOAD_MODULES with ip_conntrack_ftp and ip_nat_ftp modules. Google a bit about that to find out how can you use it.
Thanks
-- Rui Santos http://www.ruisantos.com/ Veni, vidi, Linux! -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Gary Baribault
-
Rui Santos