Re: FTP/DNAT Issue

Jon
Sun, 17 Dec 2006 00:06:00 -0000

They''re one and the same. There''s only one box and it runs
both Shorewall and the FTP server. Problem is that no one (internally or
externally) can get at the FTP server with Shorewall running.

I didn''t explain this very well, didi I?

J

Sent from the road...
+1.403.770.2837
-----Original Message-----
From: Tom Eastep <tom.eastep@hp.com>
Date: Saturday, Dec 16, 2006 4:48 pm
Subject: Re: [Shorewall-users] FTP/DNAT Issue

Jon wrote:
> Hi Tom
>
>> Thanks for replying - especially given your current state of internet
connectivity.
>
>> Maybe I''m misunderstanding the DNAT thing. I thought it would
be required to translate from the external nic to the  internal but even as I
write this I can see how little sense that makes.
>
>> I guess what I need to to simply allow TCP 21 connections from both the
net and loc zones. Can''t believe that I can''t figure it out
but I inherited these boxes and we all probably know it''s impossible to
get up to speed fast enough.
>
>
>Be sure that it is actually the internal server that you are connecting to
when you "shorewall clear" and not an FTP server running on the
>Shorewall box itself.
>
>-Tom
>
>-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
>Join SourceForge.net''s Techsay panel and you''ll get the
chance to share your opinions on IT & business topics through brief surveys
- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>_______________________________________________
>Shorewall-users mailing list
>Shorewall-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/shorewall-users