MASQUERADE problems with non standard FTP ports

iptables@barak.net.il iptables@barak.net.il
Thu, 16 Aug 2001 17:32:09 +0300


Hello,

I am running a RedHat 7.0 Linux gateway , Kernel 2.4.7 with Iptables 1.2.2.   

I am using Iptables as Firewall and MASQUERADE.
Everything work fine but not FTP to servers that runs on non standard ports.

my MASQ rule is
IPTABLES -t nat -A POSTROUTING -s $LAN_IP_RANGE -o $INET_IFACE -j MASQUERADE


I load the ip_conntrack_ftp and  ip_nat_ftp modules.

and added:

IPTABLES -A INPUT -p tcp --sport 1024:65535 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT

and also set my client to PASSIVE mode.

Nothing helps, and i can not connect those FTPs from behaind my linux gatway.

I got no problem to connect it from the linux gateway.

What did i do worng ?

Thanks in Advance,
Rogi