Re: FTP/DNAT Issue

Tom Eastep
Sun, 17 Dec 2006 02:21:28 -0000

Jon <me <at> jonwatson.ca> writes:

>
> They''re one and the same. There''s only one box and it
runs both Shorewall and
the FTP server. Problem is that
> no one (internally or externally) can get at the FTP server with Shorewall
running.
>
> I didn''t explain this very well, didi I?

No. And I don''t understand how you concluded that you fall into example
3. What you need is:

FTP/ACCEPT   net    $FW
FTP/ACCEPT   loc     $FW (assuming that you have a local interface).

-Tom