Has anyone seen this:
227 Entering Passive Mode (x,97,145,7,248,236)
connecting data channel to x.97.145.7:248,236(63724)
data channel connected to x.97.145.7:248,236(63724)
LIST
)
And nothing gets returned.
The connection hangs.
So that one static is bidirectional?
Can I use the static with an ACL?
Ex.
fixup protocol ftp 21
static (dmz, outside) 1.x.x.1 10.x.x.1 netmask 255.255.255.255 0 0
access-list outside permit tcp any 1.x.x.1 eq ftp
access-group outside in interface outside
Will this permit both passive and...
I have a server in the DMZ that provides ftp service to the outside.
When I use the static statement to nat the outside to the inside, do I also need a nat statement for the dmz to the outside?
static (dmz,outside) 1.X.X.1 10.X.X.1 255.255.255.255 0 0
nat (dmz) 1 10.x.x.1 1.x.x.1
global...
Yes, everything works fine from the inside.
Ftp active, passive, ssl
On the outside, active does not work, ssl works but it displays the internal ip, and every once in a while passive does not work. Getting errors that data channel could not be established.
Well something is not right then.
Let me see...
Here is the config:
interface ethernet0 100full
interface ethernet1 100full
interface ethernet2 100full
interface ethernet3 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
hostname...
Does the pix support multiple entries for the fixup protocol ftp statement. I know that it accepts the command, but does it actually work.
ex:
fixup protocol ftp 21
fixup protocol ftp 1021
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.