Subject: Re: ipnat and ipf newbie q
To: None <nero@www.in-design.com>
From: Rene Hexel <rh@idle.trapdoor.vip.at>
List: netbsd-help
Date: 09/15/1999 17:59:59
nero@www.in-design.com wrote:
> everything works great except ftp, which logs in, and even gets
> the Welcomemessage but when listing or anything else getsa
> Illegal PORT command from the ftp server. I cannot figure out
> why this is happening.
This is because active ftping relies on a secondary connection (that's
what the PORT command is for). This connection is not translated by
ipnat. You can compensate for this by prepending
map le0 192.0.0.1/28 -> 0.0.0.0/32 proxy port ftp ftp/tcp
to your ipnat rules.
Cheers
,
Rene