/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */


...and here is the last segment.
==================

The internal FTP server is initiating an ftp-data connection request to
the end user, however since the ftp server is on a masq'ed network, the
data connection attempt is masq'ed going through the firewall.  Thus the
end user gets a connection attempt from an arbitrary port on the masqing
firewall instead of port 20.

What is even more interesting is that if I attempt a connection to the
ftp server using a web browser (Passive mode), the ftp server sends an
IP address and a port for the web browser to connect to.  This is sent
as data in a masq'ed packet to the users web browser.  The web browser
reads that data and tries to connect using the ip address and port given
by the ftp server.  The only problem is that the ftp server reports its
own ip address (192.168.x.x) which is a private address and not routable
on the internet.  The browser then tries connecting to that IP address
and times out.

So, I know the problem (unless I have missed something).  What I need is
a solution.  What are my options for having a masq'ed ftp server?  Or do
I need to put the box on a live segment?  There have to be solutions for
putting ftp servers behind linux firewalls.  Does anyone have any hints
or suggestions.

Thanks,

Sean Brown
System Admin
Applied Geographics, Inc.
Boston, MA  02110
[EMAIL PROTECTED]

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to