Subject: Re: ipnat and ipf newbie q
To: None <nero@www.in-design.com>
From: Rene Hexel <rh@idle.trapdoor.vip.at>
List: netbsd-help
Date: 09/15/1999 17:59:59
nero@www.in-design.com wrote:

> everything works great except ftp, which logs in, and even gets
> the Welcomemessage but when listing or anything else getsa
> Illegal PORT command from the ftp server. I cannot figure out
> why this is happening.

  This is because active ftping relies on a secondary connection (that's
what the PORT command is for).  This connection is not translated by
ipnat.  You can compensate for this by prepending

map le0 192.0.0.1/28 -> 0.0.0.0/32 proxy port ftp ftp/tcp

  to your ipnat rules.

  Cheers
      ,
   Rene