iptables-masquerading but no ftp

rebelman rebelman" <rebel@snafu.de
Sat, 27 Oct 2001 10:46:45 +0200


Hi there,
I am sure this is a faq question, but I dont find anything working in the
faq, the howtos or the contents of this mailing list since netfilter digest
#180 (what does not mean there is nothing ;-)

okay, i have a standard suse 7.3 installation (kernel 2.4.10, iptables
1.2.2). it works as a dsl router. I set up masquerading:

modprobe iptable_nat
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

wow. it works and I was happy for some days. Then I tried a ftp download. It
doesn't work. Ooooh, me dummie ... I have to use ftp-modules. yupps. so i
add these commands (cause I read them here in the list):

modprobe ip_nat
modprobe ip_conntrack_ftp     # ip_conntrack was loaded before
iptables -A FORWARD -i <dev> -m state --state ESTABLISHED,RELATED -j ACCEPT

so thats it. I thought, I could ftp now. but I cant. Any help is
appreciated. ;-))
Thanks
- Frankie
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
And Linux told me: You don't exist. Go away !