5xp and custom FTP or DMZ

[amigaman]

I am using an NS5xp, trying to allow external access to internal ftp-server running on non-standard ports.

from what little usefull info i've found on the NS site, I gather it can't be done ? if this is the case is it possible to push the server into a DMZ ? ?

I'm completly new to this type of interface, been using Linksys and Sonicwall's, so bear with me if it takes a bit to get up to speed.

Thanx in advance for any help/ideas/guess's

David

 

[evilphantom]

Use a VIP. I found this information quite useful:

http://5xt.support.netscreen.safeharbor.com/knowbase/root/public/ns10196.htm?

It was quite helpful in getting my FTP setup. However I am trying to figure out hwo to get it working on a dynamic IP

Hope that helps

Dez

 

[amigaman]

thanx for the link, I've attemped to create a VIP and bound it to a custom service I created using a range of non-stand ports,
but the 5xp doesnt allow a passv connection and once connected all you get is an 'data socket failed' meaning it was unable to let a data control socket get created.

It seems that the 5xp will not allow a 'range' of incoming ports just a range of internal ports.

I need to create a range of say 20 ports that all get forwarded to the internal server's matching ports.

Again, thanx for the handy link, I'm trying to understand this 5xp, so much more involved than my prior Linksys or even the Sonicwall.

 

[Packet7]

Hello,

The VIP only allows for an External IP to be advertised to multiple internal ports (via multiple hosts). i.e. IP 200.100.100.1 could be used to send HTTP, FTP and TFTP to three different Hosts.

In your case, I guess you could use a MIP (one to one translation), or OS 5 NAT - DST, and control access via a policy (permitting your ports needed).

Hope this info is helpful.

Rgds,

John