Re: can't ftp through IP Masq

2000-08-15 Thread Sven Burgener
Hi John On Tue, Aug 15, 2000 at 02:48:12PM -0500, John Reinke wrote: > I only had one ipchains rule to turn it on, and added another to prevent > timeout on secondary ftp connections, but I don't really understand it all > yet. I might try the script below, though. What do you name it, and where >

Re: can't ftp through IP Masq

2000-08-15 Thread John Reinke
I only had one ipchains rule to turn it on, and added another to prevent timeout on secondary ftp connections, but I don't really understand it all yet. I might try the script below, though. What do you name it, and where do you put it so it gets read? (Nice footer, BTW.) John On Tue, 15 Aug 200

Re: can't ftp through IP Masq

2000-08-15 Thread Sven Burgener
On Tue, Aug 15, 2000 at 08:08:15AM -0700, Stan Kaufman wrote: > This has been discussed recently on the firewalls listserv. Check out > http://geocrawler.com/lists/3/Security/90/0/ for a searchable archive; > think you'll find some answers there. (I personally am still trying to > figure this out

Re: can't ftp through IP Masq -> IP Masq in kernel

2000-08-15 Thread John Reinke
I'm not sure about the compile problems, but there are some items you'll need to include in the kernel that you don't have selected below. Look at this howto, and it goes through all the items you'll want to enable while configuring the kernel. http://www.e-infomax.com/ipmasq/howto/ipmasq-HOWTO-1.

Re: can't ftp through IP Masq

2000-08-15 Thread Rick Macdonald
On Tue, 15 Aug 2000, John Reinke wrote: > I used 2.2.17pre6, and it handled compiling the modules for > CONFIG_IP_MASQUERADE_MOD. Also, it sounds like there have been some > security patches and things, so it is recommended to at least use 2.2.16 or > newer. IP Masq howto I read (URL was in a prev

Re: can't ftp through IP Masq

2000-08-15 Thread John Reinke
I used 2.2.17pre6, and it handled compiling the modules for CONFIG_IP_MASQUERADE_MOD. Also, it sounds like there have been some security patches and things, so it is recommended to at least use 2.2.16 or newer. IP Masq howto I read (URL was in a previous message), strongly suggested 2.2.16 or newer

Re: can't ftp through IP Masq

2000-08-15 Thread Rick Macdonald
On Tue, 15 Aug 2000, Stan Kaufman wrote: > John Reinke wrote: > > > > Here's what my problem is (for those just joining): I have IP Masqing set > > up on a potato system, and everything works through it except ftp. The ftp > > clients on machines on the private network connect to external sites,

Re: can't ftp through IP Masq

2000-08-15 Thread John Reinke
Okay, it looks like things work now. I had a two-fold problem. I'll need to know where to put things so this is all done automatically when I boot, however. The first part is that the modules weren't loading. Jason's suggestion fixed that. If I list them in /etc/modules, will they get loaded autom

Re: can't ftp through IP Masq

2000-08-15 Thread Stan Kaufman
John Reinke wrote: > > Here's what my problem is (for those just joining): I have IP Masqing set > up on a potato system, and everything works through it except ftp. The ftp > clients on machines on the private network connect to external sites, but > never are able to get a listing of the files o

Re: can't ftp through IP Masq

2000-08-15 Thread John Pearson
On Tue, Aug 15, 2000 at 03:37:30AM -0500, John Reinke wrote > I did some research, and the ip_masq_ftp.o module is automatically compiled > when CONFIG_IP_MASQUERADE_MOD is selected during kernel config. I already > have it selected, and the file is in my modules directory. And like I > mentioned p

Re: can't ftp through IP Masq

2000-08-15 Thread John Reinke
This doesn't seem to help, either. The ftp clients still just sit there, trying to get the list of files... thanks, John >The modules should be compiled automatically if you have elected to do >Masqing >in the kernel config. > >Just do an insmod and you should be okay: > >for i in /lib/modules/`u

Re: can't ftp through IP Masq

2000-08-15 Thread John Reinke
I did some research, and the ip_masq_ftp.o module is automatically compiled when CONFIG_IP_MASQUERADE_MOD is selected during kernel config. I already have it selected, and the file is in my modules directory. And like I mentioned previously, I've tried changing the passive settings on the ftp clien

Re: can't ftp through IP Masq

2000-08-15 Thread Jason Quigley
The modules should be compiled automatically if you have elected to do Masqing in the kernel config. Just do an insmod and you should be okay: for i in /lib/modules/`uname -r`/ipv4/ip_masq_*; do insmod $i;done Cheers, Jason. --On Monday, August 14, 2000 21:34 -0500 John Reinke <[EMAIL PROTECT

Re: can't ftp through IP Masq

2000-08-14 Thread John Reinke
I've got IP Masq compiled into the kernel, but I don't remember a selection for that in the kernel config. What was that? Also, I've tried both passive and non-passive in the clients (both mac and windows). >At 19:28 2000/08/14 -0500, you wrote: >>I am not able to ftp from my private network, thr

Re: can't ftp through IP Masq

2000-08-14 Thread Adam Scriven
At 19:28 2000/08/14 -0500, you wrote: I am not able to ftp from my private network, through IP Masqerading. I now have Debian 2.2, and I had Debian 2.1 before. As far as I can tell, I have set up IP Masq the same way as I did before. You need the ip_masq_ftp.o module installed, OR you need to

can't ftp through IP Masq

2000-08-14 Thread John Reinke
I am not able to ftp from my private network, through IP Masqerading. I now have Debian 2.2, and I had Debian 2.1 before. As far as I can tell, I have set up IP Masq the same way as I did before. Before, I could use ftp clients on any machine in my local network to access anything outside my netwo