using ip_nat_ftp

using ip_nat_ftp

[Albert Cervera Areny]

Hi,
  I'm trying to use ip_nat_ftp but I don't know if it is necessary to do
anything else apart from loading the ip_nat_ftp module. I've tried to
load it but can't access properly to ftpav.ca.com unless I use passive
mode. It wouldn't be a problem if eTrust supported ftp access with
passive mode :(

  Thanks for any help!

Re: using ip_nat_ftp

[Albert Cervera Areny]

It seems that my firewall is what makes ip_nat_ftp not usefull. Could
someone tell me how should I configure the firewall to enable ftp client
requests?

> Hi,
>   I'm trying to use ip_nat_ftp but I don't know if it is necessary to do
> anything else apart from loading the ip_nat_ftp module. I've tried to
> load it but can't access properly to ftpav.ca.com unless I use passive
> mode. It wouldn't be a problem if eTrust supported ftp access with
> passive mode :(
>
>   Thanks for any help!
>
>
>

Re: using ip_nat_ftp

[jpiszcz]

I have it statically compiled in, (may not be the most useful this way), 
but it works for me.
 From inside your lan, ftp gnu.org and port mode should work.
Keep in mind when you ftp somewhere the default is just to allow port 21 
(w/ connection tracker), if you want more ports, the module/kernel boot 
line takes arguments to specify up to 7 additional ports, so 8 ports total.


Albert Cervera Areny wrote:

>It seems that my firewall is what makes ip_nat_ftp not usefull. Could
>someone tell me how should I configure the firewall to enable ftp client
>requests?
>
>  
>
>>Hi,
>>  I'm trying to use ip_nat_ftp but I don't know if it is necessary to do
>>anything else apart from loading the ip_nat_ftp module. I've tried to
>>load it but can't access properly to ftpav.ca.com unless I use passive
>>mode. It wouldn't be a problem if eTrust supported ftp access with
>>passive mode :(
>>
>>  Thanks for any help!
>>
>>
>>
>>    
>>
>
>
>
>
>  
>

Re[2]: using ip_nat_ftp

[Michiel Brandenburg]

Question:
I'm trying to allow passive ftp traffic for a server running on a
nonstandard port (1212) with a non-modular ip_nat_ftp.

Is there a way to append something to the kernel boot to add 1212 to
the list of ftp ports the helper should check ?

-- 
Best regards,
 Michiel