Re: IPv6 FTP problems

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Chris Ross wrote:
|
|   For some time now, I've had problems getting IPv6 FTP working 
through my IPfilter (4.1) firewall.  I'm not quite sure what I've done 
wrong, but I'm sure a configuration setting could be adjusted to fix it.
| ...
|   When a machine tries to establish an FTP connection over IPv6, it 
works, until it attempts to start a transfer.  This evening, the FTP 
client explained:
|
| 229 Entering Extended Passive Mode (|||63935|)
| 150 Opening BINARY mode data connection for file.gz (208102 bytes).
|   0% |                                   |     0        0.00 KiB/s    
--:-- ETA^C
|
|   It never goes anywhere, and I interrupt it.  IPv4 connections to the 
same foreign host for the same file work, however.
|
|   My ipnat.conf sets up mappings for the IPv4 networks I want to be 
able to FTP through the [internal] FTP proxy:
| ...
|   Should I do something similar for IPv6?  I'm not NAT'ing IPv6, 
however, so I didn't assume I needed as much.  I think it's just a 
filtering issue.
|
|   Is there some smarts needed to auto-open the returns for FTP data 
transfers for IPv6 through ipfilter?

Is there a filtering rule that should let the connection through for IPv6?

The proxy handles both address translation as well as creating state to
allow the data connection through.

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkpS7RIACgkQP7JIXtvLbFVv2QCgpabA3T4r0qX+9wMWN7UoVXX8
aFYAn1NNcYm5FF6JclIsgOQxeBRYv95y
=nr4/
-----END PGP SIGNATURE-----