Re: [SLUG] Forwarding internal FTP connections

[Chuck Dale <bug@xxxxxxxxx>]

Try PASV mode FTP.

It's rather difficult to port forward active (standard) FTP, because it
uses high numbered ports for the actual data transfer. You would need to
forward a whole bunch of ports. I'm not sure which ports though.

Chuck

Wrote Stephen Graham on Fri, Sep 01, 2000 at 02:39:05PM +1000:
> What I am trying to currently do is forward an inbound FTP connection from
> the net to an internal machine.
> 
> Forwarding outbound connections has been working fine for some time now.
> I am running the 2.2.14 kernel (debian stable), and using ipmasqadm to set
> up my firewalling rules.
>
> ipmasqadm portfw -a -P tcp -L $EXTIP 21 -R 192.168.0.100 21
> ipmasqadm portfw -a -P tcp -L $EXTIP 20 -R 192.168.0.100 20

> I can connect to the internal FTP server fine from EXTERNAL (internet)
> addresses.  I understand how connecting to the masqueraded internal FTP
> server from an internal address will not work, but that is not a problem.
> However, as soon as I try any active commands (ie try to get the listing of
> files in a directory, or even try any transfers) the connection just seems
> to hang.

               [ charles hamilton dale <bug@xxxxxxxxx> ]