iptables-masquerading but no ftp

Bernd Prager Bernd Prager" <bprager@iamerica.net
Sat, 27 Oct 2001 16:01:28 -0400


Hi,

correct me if I'm wrong, but the FTP modules are only required for local ftp
rules, aren't they?
The masquerading doesn't care about ports. So (from my humble opinion) your
troubles
have other reasons. It should work just fine.

Allthough I loaded 'ip_nat_ftp' i don't really think I need them. And I
haven't set up any
special ftp - rules. And it works :-\


----- Original Message -----
...
> modprobe iptable_nat
> iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>
> wow. it works and I was happy for some days. Then I tried a ftp download.
It
> doesn't work. Ooooh, me dummie ... I have to use ftp-modules. yupps. so i
> add these commands (cause I read them here in the list):
>
> modprobe ip_nat
> modprobe ip_conntrack_ftp     # ip_conntrack was loaded before
> iptables -A FORWARD -i <dev> -m state --state ESTABLISHED,RELATED -j
ACCEPT
>
> so thats it. I thought, I could ftp now. but I cant. Any help is
> appreciated. ;-))