Re: FTP alternative?

[Peter Eisch <peter%boku.net@localhost>]

On 10/3/08 12:49 PM, "Matthias Scheler" <tron%zhadum.org.uk@localhost> wrote:

> 
> On 3 Oct 2008, at 18:21, Peter Eisch wrote:
>> Are you using a different kind of proxy or just not using ftp?
> 
> 
> Why do you need the FTP proxy? It is only necessary if your client
> uses active mode instead of passive mode.
> 
> Or do you run an FTP server behind a NAT gateway?
> 

The client gets NAT'd when connecting out to the server.  The IP address
inside the PORT and other commands in the ftp session aren't getting NAT'd
and the RFC 1918 address leak out.  Yes, the outboud NAT config is:

map wm2 10.1.200.0/24 -> 0/32 proxy port ftp ftp/tcp
map wm2 10.1.200.0/24 -> 0/32 portmap tcp/udp 40000:60000
map wm2 10.1.200.0/24 -> 0/32

peter