From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexandru Dragoi Subject: Re: Is ip_conntrack_ftp needed for 1:1 nat? Date: Tue, 06 Jun 2006 19:16:05 +0300 Message-ID: <4485AA45.2030801@zoomnet.ro> References: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: Robert LeBlanc Cc: netfilter@lists.netfilter.org Robert LeBlanc wrote: >I have a gateway that is using iptables and I have several 1:1 NATs >configured. I am having trouble establishing an ftp session to my remote >server. The gateway has a virtual adapter with the public IP address and >I have SNAT and DNAT configured to forward all ports to the host. What >do I need to get this working? I keep getting refused ports errors. > >Thanks, >Robert LeBlanc > > > # modprobe ip_nat_ftp You may also use iproute2 for nat, but it may not work.