From mboxrd@z Thu Jan 1 00:00:00 1970 From: "azeem ahmad" Subject: Re: ftp Date: Thu, 20 May 2004 15:18:37 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; format=flowed; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org >From: Antony Stone >Reply-To: netfilter@lists.netfilter.org >To: netfilter@lists.netfilter.org >Subject: Re: ftp >Date: Thu, 20 May 2004 10:19:31 +0100 > >On Thursday 20 May 2004 5:41 am, azeem ahmad wrote: > > > From: Antony Stone > > > > >On Wednesday 19 May 2004 10:05 pm, azeem ahmad wrote: > > > > hi all > > > > i m unable to browse ftp. it says > > > > an error occured opening that folder on the ftp server. make sure >you > > > > have permissions to access that folder > > > > details > > > > 200 type set to A > > > > 500 Illegal port command > > > > 500 LPRT not understood > > > > > > Do you get the same error when accessing the server from a machine not >via > > > the netfilter firewall (eg localhost, or some other client on the same > > > subnet)? > > > > > only one box is accessing ftp that is firewall box itself. no other box > > behind the firewall can access the ftp outside. > >Okay - let me rephrase the question. > >Do you get the same error message from the server if you access it from >some >machine which does not go through the firewall (and is not the firewall >itself)? Even if you have to temporarily set up a client to test this, I >think it would be useful, because it would be good to know if the server >generates this error independently of anything the firewall is doing to the >packets. > >Also, have you tried adjusting the MASQUERADE rule as I suggested, so it >applies to the external interface only, as this may have a bearing on the >problem? > >Regards, > >Antony. > >-- >Success is a lousy teacher. It seduces smart people into thinking they >can't >lose. > > - William H Gates III > the server is accesible from other machines. for an example i goto squid mirror sites http://www.squid-cache.org/Mirrors/ftp-mirrors.html but even no server here can be accessed. here is a long list of ftp mirror servers. and also i set the rule up as u said. but still no luck and i wanna ask something that is not relevant to list is that u quote very good quotations. can u tell me from where i can get quotes like this and also quotes that are relevant to computer science. infact i m a student and some time i need such material. sorry for this irrelevant question Regards Azeem _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963