Shorewall users - Oct 2002 - ftp works on internal network but not on external one

hey, 
basically what i have right now is a suse linux machine as a router using
shorewall 1.3.9b... eth0 is the wan (24.42.114.37) and eth1 is the local network
(192.168.0.1)...  the routing part is working 100%.. but now im trying to setup
a ftp on that same linux server....  im using pure-ftpdcd 1.0.12. when i install
the ftp server (using default settings) i can access the ftp from within the
internal network lets say 192.168.0.2 using both the ftp://192.168.0.1 and
ftp://24.42.114.37... but if i try get my friend to connect to my ftp.. (hes not
on the local network) he uses 24.42.114.37 but he gets connection not avaible..
do i have to add any new rules... cause right now im just using the default
2-interface settings i downloaded...

thanks

Derek Knapp wrote:
> hey,
> basically what i have right now is a suse linux machine as a router 
> using shorewall 1.3.9b... eth0 is the wan (24.42.114.37) and eth1 is the 
> local network (192.168.0.1)...  the routing part is working 100%.. but 
> now im trying to setup a ftp on that same linux server....  im using 
> pure-ftpdcd 1.0.12. when i install the ftp server (using default 
> settings) i can access the ftp from within the internal network lets say 
> 192.168.0.2 using both the ftp://192.168.0.1 and ftp://24.42.114.37... 
> but if i try get my friend to connect to my ftp.. (hes not on the local 
> network) he uses 24.42.114.37 but he gets connection not avaible.. do i 
> have to add any new rules... cause right now im just using the default 
> 2-interface settings i downloaded...
> 
In /etc/shorewall/rules:

ACCEPT	net	fw	tcp	ftp

And hope that your ISP isn''t blocking connection requests to low ports.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net