Hi, I'm trying to accept FTP uploads (using VSFTP on Ubuntu 14.04) from within a Shorewall-managed LAN. nf_nat_ftp and nf_conntrack_ftp are both happily loaded on the Shorewall server and VSFTP is accepting clients from within the LAN. Here's the rule I've added to /etc/shorewall/rules: DNAT inet:eth1 lan:10.0.0.34:21 tcp 49034 - xxx.xx.xx.xxx ...where 10.0.0.34 is my internal DNAT address, 21, obviously, is the FTP port I want to open up, 49034 is the port I use for port-forwarding through the firewall to my PC, and xxx.xx.xx.xxx is my external IP. As you can no doubt guess, this isn't working. My external client is getting a could not parse response code error. Does anyone have any idea what I should be doing? Thanks, ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech