[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
Re: FTP Through Firewall
- From: Adam McKee <amckee home com>
- To: "'Linux Group (Saskatoon)'" <linux slg org>
- Cc: "'Linux (LOSURS Q&A)'" <q&a losurs org>,"'redhat-list redhat com'" <redhat-list redhat com>
- Subject: Re: FTP Through Firewall
- Date: Mon, 19 Feb 2001 12:59:47 -0600 (CST)
Did you "insmod ip_masq_ftp" ?
-Adam
On Mon, 19 Feb 2001, Tanner, Robby wrote:
> I am using IPCHAINS and IPMASQ to provide internet access to our
> LAN. I am sure you've all seen THIS before. The windows FTP clients are
> having a difficult time retrieving the folder listing. I have the
> ip_masq_ftp loaded but I am still getting the following log messages:
>
> "
> Feb 19 11:13:36 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2832 129.128.5.191:42041 L=44 S=0x10 I=16261 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:13:39 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2832 129.128.5.191:42041 L=44 S=0x10 I=18565 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:18:28 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2840 129.128.5.191:42090 L=44 S=0x10 I=6790 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:18:31 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2840 129.128.5.191:42090 L=44 S=0x10 I=7302 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:31:00 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2855 129.128.5.191:42102 L=44 S=0x10 I=56455 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:31:03 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2855 129.128.5.191:42102 L=44 S=0x10 I=56967 F=0x4000 T=127
> SYN (#26) "
>
> My understanding so far is that the FTP server is trying to create an
> inbound connection to my LAN address which it should not be requesting.
> Clearly, the MASQing is not taking place, although it should be as far as I
> can tell. The 204.112.*.* is my LAN address.
>
> How can I get FTP through my firewall? Is the client simply misconfigured?
> I am using WS_FTP LE.
>
> Regards,
> Rob
>
> --
> Saskatoon Linux Group Mailing List.
> "Ein zuviel an Ordnung ruft in uns unweigerlich den Wunsch auf Totschlag
> hervor."
> --
> To unsubscribe, send mail to
> 'linux-request slg org' with
> 'unsubscribe' in the body.
>
--
-Adam
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]