FTP DOESN'T WORK

[Guest_imported]

I'm using IP-forwarding e Masquarade in order to share my INTERNET connection with my local LAN. Everything OK but the FTP.It doesn't work.
Someone told me that I must use one special module for the FTP sharing, but I cannot find it(I'm using RH7.2).
What can I do????
Using SQUID???

 

[ifincham]

Hi,



Are you using iptables or ipchains for this ? Normal FTP is difficult to handle because, for the data transfer part, it involves the server initiating a second connection from its port 20 back to the client on an unprivileged port. This normally causes problems if you check for inbound stuff being only allowable on an 'established' connection.



The simplest way round the problem is to make sure the client invokes a passive connection to the server (Most FTP client software has a config option to use passive ftp). This involves the server allocating a port for the data connection and asking the client to initiate a connection to that port. Hence both the control connection (to port 21) and the subsequent data connection are initiated by the client and should work with straight masquerading unless you coded some restrictions in the rules.



Hope this helps