FTP server under DMZ or LAN

[Johnny Tang]

Make sure you're allowing udp as well as tcp

Thanks,
Fei


>From: "Cristiano Costa" <cristianosurf@hotmail.com>
>To: netfilter@lists.samba.org
>Subject: FTP server under DMZ or LAN
>Date: Thu, 18 Oct 2001 23:46:06
>Hello People
>
>I´m having problems in making a connection to a ftp server under the
>iptables firewall, I´m using Red Hat 7.1 in the firewall.
>The problem is: when I connect to FTP server, this accept my connection,
>user name and passord, but when I try to list files I receive the following
>message:
>Can´t open data connection
>
>I´m using ip_conntrack_ftp
>I´m making sndat and dnat to ftp to ports 20 and 21, this ftp server may
>stay in DMZ or LAN, in anyone of theses I have sucess to make a transfer or
>file list.
>I make forward for ports 20 and 21 from INET_IFACE to DMZ_IFACE or 
>LAN_IFACE
>too.
>If anybody know something about this problem please helpme and if anybody
>have a sample script to make this please sendme.
>
>Tanks for attention!
>________________________________________
>Cristiano R. I. da Costa
>Support and Security Systems
>________________________________________
>
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp