RE: RE: [Security Firewall] FTP Problem

This is a multi-part message in MIME format...

------------=_1128590104-811-113
Content-class: urn:content-classes:message
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<No I haven't set an external IP for 192.168.1.11.>
Ah, then there is your problem. You need to setup the masquerading to
map the external IP to the internal.

Cheers.

-----Original Message-----
From: security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]
[mailto:security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]] On Behalf Of
mtiller-XZoyATsUNX5Wk0Htik3J/[email protected]
Sent: 06 October 2005 10:10
To: security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected];
security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]
Subject: Re: RE: [Security Firewall] FTP Problem

Neill,

Thanks for the prompt reply,=20

I have several DNAT rules, but each one is only for one particular WAN
IP address that I want to allow to FTP into my server.  Yes I do want
all FTP traffic to go to that one LAN address, but I only want a select
few addresses to have access, 4 at most.  No I haven't set an external
IP for 192.168.1.11.

Regards

Mark


From: "Mitchell, Neill" <[email protected]>
Date: 2005/10/06 Thu AM 08:19:16 GMT
To: <security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]>
Subject: RE: [Security Firewall] FTP Problem

Do you have an earlier DNAT ftp rule? If you do it will be taking
precedent. Why are you doing DNAT? You realise that all ftp traffic will
go to that one box if you do that? Perhaps that is what you want though.
Have you setup the masquerade rule for the 192.168.1.11 box? I assume
you have allocated it an external IP.

Cheers

-----Original Message-----
From: security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]
[mailto:security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]] On Behalf Of Mark
Tiller
Sent: 06 October 2005 07:06
To: security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]
Subject: [Security Firewall] FTP Problem

Hi All,

I'm having trouble allowing someone to FTP inwards through my MNF 2
firewall.

I'm currently running MNF 1 and MNF 2 in parallel (obviously on separate
boxes) until I can get all my functionality working on MNF 2.  The FTP
server is  at 192.168.1.11.

On MNF 1 I have the following rules which work.

ACCEPT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp
all
ACCEPT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp-data
all


On MNF 2 I have the following rules which do NOT work

DNAT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp

DNAT 	wan:nn.nn.nn.nn 	lan:192.168.1.11 	tcp 	ftp-data

Can anybody tell me what I'm dong wrong?

Thanks in advance

Mark





_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered
through the MessageLabs Virus Scanning Service. For further infomation
visit http://www.minuco.com or alternatively mail [email protected]



- ------------------------------

minuco
vigilize product suite   |   internet solutions   |   graphic design

31 Museum Street
London WC1A 1LG

t: +44 (0)20 7436 9944
f: +44 (0)20 7436 9955

http://www.minuco.com

You have received this e-mail from minuco. It is intended to be read by
the addressee because it could contain confidential and privileged
information (including any attachments). If you are not the person or
organisation this e-mail was intended for please return it to the sender
and delete it from your computer(s). You must not copy, distribute,
disclose, or disseminate the contents of this e-mail or its attachments
to any third party unless authorised by minuco.

It is the responsibility of the recipient to ensure that the forwarding,
opening or use of the e-mail (and any attachments) will not adversely
affect their systems or data. Please carry out appropriate virus checks.

All rights reserved. The intellectual property in this e-mail and any
attachments are vested solely in minuco.
_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered
through the MessageLabs Virus Scanning Service. For further infomation
visit http://www.minuco.com or alternatively mail [email protected]




-----------------------------------------
Email sent from www.ntlworld.com
Virus-checked using McAfee(R) Software=20
Visit www.ntlworld.com/security for more information


_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered
through the MessageLabs Virus Scanning Service. For further infomation
visit http://www.minuco.com or alternatively mail [email protected]



- ------------------------------

minuco
vigilize product suite   |   internet solutions   |   graphic design

31 Museum Street
London WC1A 1LG

t: +44 (0)20 7436 9944
f: +44 (0)20 7436 9955

http://www.minuco.com

You have received this e-mail from minuco. It is intended to be read by the=
 addressee because it could contain confidential and privileged information=
 (including any attachments). If you are not the person or organisation thi=
s e-mail was intended for please return it to the sender and delete it from=
 your computer(s). You must not copy, distribute, disclose, or disseminate =
the contents of this e-mail or its attachments to any third party unless au=
thorised by minuco.

It is the responsibility of the recipient to ensure that the forwarding, op=
ening or use of the e-mail (and any attachments) will not adversely affect =
their systems or data. Please carry out appropriate virus checks.

All rights reserved. The intellectual property in this e-mail and any attac=
hments are vested solely in minuco.
_____________________________________________________________________
This message has been checked for all known viruses by Minuco delivered thr=
ough the MessageLabs Virus Scanning Service. For further infomation visit h=
ttp://www.minuco.com or alternatively mail [email protected]


------------=_1128590104-811-113
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: quoted-printable

____________________________________________________
Want to buy your Pack or Services from Mandriva?=20
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________

------------=_1128590104-811-113--