From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexandru Dragoi Subject: Re: FTP and Masquerading Date: Tue, 13 Jun 2006 22:04:17 +0300 Message-ID: <448F0C31.20907@zoomnet.ro> References: <7e53eda20606130610w5961f08alb60a33157d3e4158@mail.gmail.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <7e53eda20606130610w5961f08alb60a33157d3e4158@mail.gmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: Syed AbuBakr Cc: netfilter@lists.netfilter.org Syed AbuBakr wrote: > 1. Here is the out put of ip tables > # Generated by iptables-save v1.3.5 on Tue Jun 13 18:04:23 2006 > *nat > :PREROUTING ACCEPT [4089441:225469685] > :POSTROUTING ACCEPT [655:225183] > :OUTPUT ACCEPT [244915:14983380] > -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports > 8080 > -A POSTROUTING -o eth1 -j MASQUERADE > COMMIT > # Completed on Tue Jun 13 18:04:23 2006 > # Generated by iptables-save v1.3.5 on Tue Jun 13 18:04:23 2006 > *filter > :INPUT ACCEPT [16927662:11422086898] > :FORWARD ACCEPT [27804583:6839123278] > :OUTPUT ACCEPT [17583420:11965931541] > COMMIT > # Completed on Tue Jun 13 18:04:23 2006 > > 2. It gives problem during connection in passive mode, and does not > list any folder contents and then obviously no download. > > Looking Forward > You should not have any problem in passive mode, since there is no filtering. You may need to load ip_nat_ftp for active mode.