[100840] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Unidentified subject!

daemon@ATHENA.MIT.EDU (rex)
Mon Nov 23 14:01:24 1998

Date: Mon, 23 Nov 1998 14:01:51 -0500
To: redhat-list@redhat.com
From: rex <rex.henderson@santafe.cc.fl.us>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

Several FAQs I've read in configuring ipfwadm mention lines similar to these
to allow ftp clients on the private network(if eth1) access to servers on
the public network(if eth0):
ipfwadm -I -a accept -P tcp -S 0.0.0.0/0 20 -D 0.0.0.0/0 1025:65535
ipfwadm -I -a accept -P tcp -S 0.0.0.0/0 -D 0.0.0.0/0 20
ipfwadm -I -a accept -P tcp -S 0.0.0.0/0 -D 0.0.0.0/0 21
ipfwadm -F -m -a accept -P tcp -S 10.0.0.0/8 -W eth0 -D 0.0.0.0/0

My clients connnect and login fine, but when trying to perform an actual
data transfer vi ls, get, put, etc. I get 
"Can't build data connection: connection refused"
and sometimes
"Illegal PORT command
Can't build data connection: no PORT specified"
My only guess at this time is that the server is trying to connect back to
port 20 of my client but since it is my gateway masquerading the connection
it doesn't accept the attempt by the server to connect. If figure the
client times out and gives the error above.
Am I close? Anybody have suggestions for fixing this (perhaps using
ipautofw or ipportfw).
Rex




-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post