[Shorewall-users] my problem with runing a passive FTP server in DMZ

Tom Eastep teastep at shorewall.net
Tue Jun 17 20:48:35 PDT 2003


On Tue, 17 Jun 2003, Tom Eastep wrote:

>
> > so if my assumptions are correct, then my rule if I'm trying to connect to my FTP from work should be:
> >
> > DNAT net dmz:ip_here:23000 tcp     23000   -       192.168.2.2
> >
>
> No --
>


You have reversed the server IP address and the external IP address.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep at shorewall.net


More information about the Shorewall-users mailing list