/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hi!
I've checked the paste issues about this problem, but yet, I've got problem
:(
I'm running a firewall linux box with RH 6.1 adn kernel 2.2.14. The PC is
an old 486 with 16Mb RAM with, of course, 2 NICs.
This is my rc.firewall
-----------------------------------------------------
[root@firewall rc.d]# cat rc.firewall
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_always_defrag
ipchains -F input
ipchains -F output
ipchains -F forward
ipchains -P input ACCEPT
ipchains -P forward REJECT
ipchains -P output ACCEPT
ipchains -A forward -s 192.168.0.1/24 -j MASQ
ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L 26.20.128.254 80 -R 192.168.0.200 80
ipmasqadm portfw -a -P tcp -L 26.20.128.254 23 -R 192.168.0.200 23
ipmasqadm portfw -a -P tcp -L 26.20.128.254 110 -R 192.168.0.200 110
ipmasqadm portfw -a -P tcp -L 26.20.128.254 25 -R 192.168.0.200 25
ipmasqadm portfw -a -P tcp -L 26.20.128.254 21 -R 192.168.0.200 21
ipmasqadm portfw -a -P tcp -L 26.20.128.254 389 -R 192.168.0.200 389
-----------------------------------------------------
Everything is working fine, www, pop, smtp, ldap, ecc.. The only problem is
about ftp but only when accessed by web browser (both NS and IE5 give the
problems). I can see the files on the server, but can't download them.
The problem is that the remote client try to open the IP on the internal
LAN, not the IP on the firewall.
If I use a real ftp-client it's all ok.
How to solve this problem? Anyone can please help me?
Thanks in advance.
Best Regards,
Giuseppe Calignano
[EMAIL PROTECTED] (internet)
Gruppo Informatico DRE - Veneto
Tel. 041-5311364
ITALY
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
