Re: [Proftpd-user] Relaxed AllowForeignAddress option

> > if you are unable to fix the NAT gateway, it should be possible to work
> > around your problem by defining class for your internal network:
> > http://www.proftpd.org/docs/howto/Classes.html
> > 
> > and by allowing foreign address to your internal network by using
> > mod_ifsession and <IfClass> directive.
> 
> Thanks! That is the most elegant solution. Pity it is missing in [2]
> otherwise I
> would have explored it. I have applied below configuration and it seems
> to work
> fine from the first glance:
> 
> MasqueradeAddress 77.10.11.12
> 
> 
> <IfModule mod_ifsession.c>
> <Class internal>
>   From 10.0.0.0/8
> </Class>
> 
> 
> <IfClass internal>
>   MasqueradeAddress 10.0.0.100
> </IfClass>
> </IfModule>
> 
> 
> [1] http://www.shorewall.net/FTP.html#Conntrack
> [2] http://www.proftpd.org/docs/howto/NAT.html

The above is indeed the solution I was going to suggest: using Classes
and mod_ifsession.

And I have now updated the NAT howto to include this as an example:

  http://www.proftpd.org/docs/howto/NAT.html#UsingClasses

Cheers,
TJ

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html