Mailing List Archive: MASQUERADE help

Greetings

I have a problem i think it is with masquerading, I'm masquerading my
internal network with my real ip everything works fine, but when i try to
ftp a get the following errorr

ftp> ls -a
502 Illegal PORT Command
425 Can't build data connection: Connection refused.

Any idea????

I have loaded the module ip_nat_ftp.o

I've done the masquerading with the following command

iptables -t nat -A POSTROUTING -s 10.2.0.0/24 -j MASQUERADE

here are modules loaded on my Linux machine

ip_nat_ftp 3760 0 (unused)
ipt_MASQUERADE 1712 2 (autoclean)
iptable_nat 16160 1 (autoclean) [ip_nat_ftp ipt_MASQUERADE]
ip_conntrack 15824 1 (autoclean) [ip_nat_ftp ipt_MASQUERADE
iptable_nat]
ipt_REJECT 2528 1 (autoclean)
iptable_filter 2304 0 (autoclean) (unused)
ip_tables 11072 6 [ipt_MASQUERADE iptable_nat ipt_REJECT
iptable_filter]

I'm useing RH7.1 with iptables v1.2.1a

Thanks

astrit zhushi

I solve the problem

i also inserted the module ip_conntrack_ftp.o and now the FTP is working
fine

thx

astrit zhushi

:)

----- Original Message -----
From: "astrti" <astrit@albalinux.org>
To: <netfilter@lists.samba.org>
Sent: Wednesday, August 08, 2001 03:52 AM
Subject: MASQUERADE help

> Greetings
>
> I have a problem i think it is with masquerading, I'm masquerading my
> internal network with my real ip everything works fine, but when i try to
> ftp a get the following errorr
>
> ftp> ls -a
> 502 Illegal PORT Command
> 425 Can't build data connection: Connection refused.
>
> Any idea????
>
> I have loaded the module ip_nat_ftp.o
>
> I've done the masquerading with the following command
>
> iptables -t nat -A POSTROUTING -s 10.2.0.0/24 -j MASQUERADE
>
> here are modules loaded on my Linux machine
>
> ip_nat_ftp 3760 0 (unused)
> ipt_MASQUERADE 1712 2 (autoclean)
> iptable_nat 16160 1 (autoclean) [ip_nat_ftp ipt_MASQUERADE]
> ip_conntrack 15824 1 (autoclean) [ip_nat_ftp ipt_MASQUERADE
> iptable_nat]
> ipt_REJECT 2528 1 (autoclean)
> iptable_filter 2304 0 (autoclean) (unused)
> ip_tables 11072 6 [ipt_MASQUERADE iptable_nat ipt_REJECT
> iptable_filter]
>
> I'm useing RH7.1 with iptables v1.2.1a
>
> Thanks
>
> astrit zhushi
>
>