Re: RE: [Security Firewall] FTP Problem

This is a multi-part message in MIME format.

------=____1128589817848_J.1MuOQL6r
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Neill,

Thanks for the prompt reply, 

I have several DNAT rules, but each one is only for one particular WAN IP address that I want to allow to FTP into my server.  Yes I do want all FTP traffic to go to that one LAN address, but I only want a select few addresses to have access, 4 at most.  No I haven't set an external IP for 192.168.1.11.

Regards

Mark


From: "Mitchell, Neill" <[email protected]>
Date: 2005/10/06 Thu AM 08:19:16 GMT
To: <security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]>
Subject: RE: [Security Firewall] FTP Problem

Do you have an earlier DNAT ftp rule? If you do it will be taking
precedent. Why are you doing DNAT? You realise that all ftp traffic will
go to that one box if you do that? Perhaps that is what you want though.
Have you setup the masquerade rule for the 192.168.1.11 box? I assume
you have allocated it an external IP.

Cheers

-----Original Message-----
From: security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]
[mailto:security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]] On Behalf Of Mark
Tiller
Sent: 06 October 2005 07:06
To: security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]
Subject: [Security Firewall] FTP Problem

Hi All,

I'm having trouble allowing someone to FTP inwards through my MNF 2
firewall.

I'm currently running MNF 1 and MNF 2 in parallel (obviously on separate
boxes) until I can get all my functionality working on MNF 2.  The FTP
server is  at 192.168.1.11.

On MNF 1 I have the following rules which work.

ACCEPT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp
all
ACCEPT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp-data
all


On MNF 2 I have the following rules which do NOT work

DNAT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp

DNAT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp-data

Can anybody tell me what I'm dong wrong?

Thanks in advance

Mark





_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered
through the MessageLabs Virus Scanning Service. For further infomation
visit http://www.minuco.com or alternatively mail [email protected]



- ------------------------------

minuco
vigilize product suite   |   internet solutions   |   graphic design

31 Museum Street
London WC1A 1LG

t: +44 (0)20 7436 9944
f: +44 (0)20 7436 9955

http://www.minuco.com

You have received this e-mail from minuco. It is intended to be read by the addressee because it could contain confidential and privileged information (including any attachments). If you are not the person or organisation this e-mail was intended for please return it to the sender and delete it from your computer(s). You must not copy, distribute, disclose, or disseminate the contents of this e-mail or its attachments to any third party unless authorised by minuco.

It is the responsibility of the recipient to ensure that the forwarding, opening or use of the e-mail (and any attachments) will not adversely affect their systems or data. Please carry out appropriate virus checks.

All rights reserved. The intellectual property in this e-mail and any attachments are vested solely in minuco.
_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered through the MessageLabs Virus Scanning Service. For further infomation visit http://www.minuco.com or alternatively mail [email protected]




-----------------------------------------
Email sent from www.ntlworld.com
Virus-checked using McAfee(R) Software 
Visit www.ntlworld.com/security for more information

------=____1128589817848_J.1MuOQL6r
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________


------=____1128589817848_J.1MuOQL6r
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: quoted-printable

____________________________________________________
Want to buy your Pack or Services from Mandriva?=20
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________

------=____1128589817848_J.1MuOQL6r--