Hi,
I'm trying to accept FTP uploads (using VSFTP on Ubuntu 14.04) from within
a Shorewall-managed LAN. nf_nat_ftp and nf_conntrack_ftp are both happily
loaded on the Shorewall server and VSFTP is accepting clients from within
the LAN. Here's the rule I've added to /etc/shorewall/rules:
DNAT            inet:eth1       lan:10.0.0.34:21        tcp     49034   -
    xxx.xx.xx.xxx
...where 10.0.0.34 is my internal DNAT address, 21, obviously, is the FTP
port I want to open up, 49034 is the port I use for port-forwarding through
the firewall to my PC, and xxx.xx.xx.xxx is my external IP. As you can no
doubt guess, this isn't working. My external client is getting a
could not parse response code
error.
Does anyone have any idea what I should be doing?
Thanks,
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and
their
applications. Written by three acclaimed leaders in the field, 
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech