/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
For a good explanation of the reasons, differences and implications
(client-side & server-side talking) of both methods of FTPing (normal [used
by traditional clients] and PASV [used by web browsers]) you can read the
readme.ftp file included in the Bastille hardening script (download from
http://www.bastille-linux.org; an approx. 145 KB tgz file).
Later, you can examine the sources (Perl modules) to see how they implement
the ipchains rules to accomodate the different situations of a machine
behind the firewall being client/server
and using one or other FTP mode.
------Original Message------
From: "Quasar" <[EMAIL PROTECTED]>
To: "Masq Mailing List" <[EMAIL PROTECTED]>
Sent: April 26, 2000 10:03:00 AM GMT
Subject: [Masq] FTP via Browser (again? ;) )
/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hi!
I've checked the paste issues about this problem, but yet, I've got problem
:(
I'm running a firewall linux box with RH 6.1 adn kernel 2.2.14. The PC is
an old 486 with 16Mb RAM with, of course, 2 NICs.
This is my rc.firewall
-----------------------------------------------------
[root@firewall rc.d]# cat rc.firewall
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
echo "1" > /proc/sys/net/ipv4/ip_forward
echo "1" > /proc/sys/net/ipv4/ip_always_defrag
ipchains -F input
ipchains -F output
ipchains -F forward
ipchains -P input ACCEPT
ipchains -P forward REJECT
ipchains -P output ACCEPT
ipchains -A forward -s 192.168.0.1/24 -j MASQ
ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L 26.20.128.254 80 -R 192.168.0.200 80
ipmasqadm portfw -a -P tcp -L 26.20.128.254 23 -R 192.168.0.200 23
ipmasqadm portfw -a -P tcp -L 26.20.128.254 110 -R 192.168.0.200 110
ipmasqadm portfw -a -P tcp -L 26.20.128.254 25 -R 192.168.0.200 25
ipmasqadm portfw -a -P tcp -L 26.20.128.254 21 -R 192.168.0.200 21
ipmasqadm portfw -a -P tcp -L 26.20.128.254 389 -R 192.168.0.200 389
-----------------------------------------------------
Everything is working fine, www, pop, smtp, ldap, ecc.. The only problem is
about ftp but only when accessed by web browser (both NS and IE5 give the
problems). I can see the files on the server, but can't download them.
The problem is that the remote client try to open the IP on the internal
LAN, not the IP on the firewall.
If I use a real ftp-client it's all ok.
How to solve this problem? Anyone can please help me?
Thanks in advance.
Best Regards,
Giuseppe Calignano
[EMAIL PROTECTED] (internet)
Gruppo Informatico DRE - Veneto
Tel. 041-5311364
ITALY
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
______________________________________________
FREE Personalized Email at Mail.com
Sign up at http://www.mail.com/?sr=signup
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
