Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Feb 2003 12:03:30 -0500 (EST)
From:      Wesley Morgan <morganw@chemikals.org>
To:        Redmond Militante <r-militante@northwestern.edu>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: ipf/ipnat and passive ftp
Message-ID:  <20030203120145.G35860@volatile.chemikals.org>
In-Reply-To: <20030203164339.GA1541@darkpossum>
References:  <20030203164339.GA1541@darkpossum>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 3 Feb 2003, Redmond Militante wrote:

> rdr xl0 0.0.0.0/0 port 21 -> 192.168.1.50 port 21 tcp
> rdr xl0 0.0.0.0/0 port > 1023 -> 192.168.1.50 port > 1023 tcp
>
> any advice you could give would be highly appreciated.

Try this in your ipnat rules instead of the rdr:

map xl0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp

Also, you might want to look at the IPFilter FAQ:

http://home.earthlink.net/~jaymzh666/ipf/index.html

-- 
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030203120145.G35860>