ftp-proxy and active passive

Andreas Meyer <[email protected]> Wed, 24 Mar 2004 10:32:38 +0100
Newsgroups gmane.linux.suse.proxy-suite
Message-ID <[email protected]>
Hello!

I tried to use the ftp-proxy but had some problems with active-passive mode.
I want to use active-mode for the clients to ftp to the proxy.

In the netfilter-log I found this:
Mar 24 09:34:25 cherry kernel: verw. TCP Paket IN= OUT=ppp0 SRC=82.139.196.116
 DST=212.202.67.186 LEN=60 TOS=0x08 PREC=0x00 TTL=64 ID=42628 DF PROTO=TCP
 SPT=3806 DPT=32896 WINDOW=5664 RES=0x00 SYN URGP=0

It seems passive-mode is used.

So I had to explicitly open all high-ports on the firewall:
iptables -A OUTPUT -p TCP --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT

Is there a way to force active-mode with the ftp-proxy?

Thanks in advance!
-- 
   Andreas Meyer

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]