Re: lug-bg: FTP clients problem

[zimage@xxxxxxxxx (Theodor Milkov)]

On Tue, Jan 23, 2001 at 03:55:34AM -0800, neZnaiko wrote:
> hi!
> 
> imam Linux box s 1 LAN carta i 2 IP realno i
> 192.168.0... . kernela e 2.2.16, polzvam ipchains
> 1.3.9. 
> 
> imam samo slednite prqvila
> 
> /sbin/ipchains -A forward -i eth0 -d 192.168.0.0/16
> /sbin/ipchains -A forward -j MASQ -i eth0 -s
> 192.168.0.0/16 -d 0.0.0.0/0
> /sbin/ipchains -A forward -i eth0:1 -d 192.168.0.0/16
> 
> t.e. nikakvi filtri etc...
> 
> i vsichko raboti normalno /pone nikoi ne se e oplakal,
> a i az ne sym vidial problem/ s izkluchenie na ftp. 
> 
> problema e sled otorizirane kym ftp server dava:
> ftp> ls
> 500 Illegal PORT Command
> 425 Can't build data connection: Connection refused.
> ftp>
> 
> ili:
> 230 Anonymous access granted, restrictions apply.
> Remote system type is UNIX.
> Using binary mode to transfer files.
> ftp> ls
> 500 Illegal PORT command.
> ftp: bind: Address already in use
> ftp>

Problema e che by default FPT clientite se opitvat da saobshtiat na FTP
server-a IP-to/PORT-a na koito da se izgradi connection-a. Variantite sa 2:

1. Da se okaje na clientite da polzvat passive mode
2. Da slojish na Linux saotvetnia masquerading module: ip_masq_ftp

I dvata varianta sa dobri. Variant 2 e prozrachen za potrebitelite, polzvam go
- raboti.

egards


-- 
        =- --rw------- =--=--=--=--=--=--=--=--=--=--=--=--=--=
          Theodor Milkov           Administrator IP Networks
          Davidov Electric Ltd.    Phone: +359 (2) 730158
          PGP: http://www.zimage.delbg.com/zimage.asc
        =--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=


<HR>
<UL>
<LI>application/pgp-signature \\\\\\\\\ \\\\: stored
</UL>

==================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
Otpiswaneto RABOTI !!! : Majordomo@xxxxxxxxxxxxxxxxxx UNSUBSCRIBE LUG-BG
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora