Did you "insmod ip_masq_ftp" ?
-Adam
On Mon, 19 Feb 2001, Tanner, Robby wrote:
> I am using IPCHAINS and IPMASQ to provide internet access to our
> LAN. I am sure you've all seen THIS before. The windows FTP clients are
> having a difficult time retrieving the folder listing. I have the
> ip_masq_ftp loaded but I am still getting the following log messages:
>
> "
> Feb 19 11:13:36 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2832 129.128.5.191:42041 L=44 S=0x10 I=16261 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:13:39 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2832 129.128.5.191:42041 L=44 S=0x10 I=18565 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:18:28 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2840 129.128.5.191:42090 L=44 S=0x10 I=6790 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:18:31 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2840 129.128.5.191:42090 L=44 S=0x10 I=7302 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:31:00 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2855 129.128.5.191:42102 L=44 S=0x10 I=56455 F=0x4000 T=127
> SYN (#26)
> Feb 19 11:31:03 weisktsv03 kernel: Packet log: forward DENY eth0 PROTO=6
> 204.112.40.137:2855 129.128.5.191:42102 L=44 S=0x10 I=56967 F=0x4000 T=127
> SYN (#26) "
>
> My understanding so far is that the FTP server is trying to create an
> inbound connection to my LAN address which it should not be requesting.
> Clearly, the MASQing is not taking place, although it should be as far as I
> can tell. The 204.112.*.* is my LAN address.
>
> How can I get FTP through my firewall? Is the client simply misconfigured?
> I am using WS_FTP LE.
>
> Regards,
> Rob
>
> --
> Saskatoon Linux Group Mailing List.
> "Ein zuviel an Ordnung ruft in uns unweigerlich den Wunsch auf Totschlag
> hervor."
> --
> To unsubscribe, send mail to
> '[EMAIL PROTECTED]' with
> 'unsubscribe' in the body.
>
--
-Adam
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
