Shorewall users - Apr 2008 - ftp masq

Hello to all.
I´m running shorewall 4.0
I have my Server with this configuration:

Wan: eth0: 10.1.1.254 - connected to adsl router (dynamic ip)
Lan: eth1: 192.168.1.254 - local network

I have a FTP Server in the 192.168.1.253 on port 21.

In /etc/shorewall/rules:
DNAT            net             loc:192.168.1.253     tcp     21

/etc/shorewall/masq:
eth0                    eth1

IF i use Firefox of flashfxp client i can Access the FTP Server ok with no
problems.

But if i use internet Explorer i can´t see the directory listing and i have
timeout error. This only occour when i try to access from outside of my
network.

I use a no-ip host to update the dynamic ip.

My question is: i have to change others configurations in shorewall to this
works fine in internet Explorer?

Thanks,

Wilson



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don''t miss this year''s exciting event. There''s still
time to save $100.
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone

Wilson A. Galafassi Jr. wrote:
> 
> My question is: i have to change others configurations in shorewall to this
> works fine in internet Explorer?
>
No.

I suspect that IE is using passive mode by default and that something is 
going wrong with the double-NAT that you are doing in the router and in the 
Shorewall box (why are you doing that?).

Use a command-line FTP client with debugging enabled to see what is 
happening (see http://www.shorewall.net/FTP.html).

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don''t miss this year''s exciting event. There''s still
time to save $100.
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone