[Proftpd-user] Need help with MasqueradeAddress
Robert <[email protected]> Thu, 16 Dec 2021 19:06:09 -0500
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CALOL-CnTzFHkLsxp2=OOyM-0bjE6rXVNW0mFvEWcoWqUEbf-zg@mail.gmail.com> |
Regarding a config entry like this... MasqueradeAddress ftp.domainname.com ...does the server respond to PASV with the domain name (eg: ftp.domainname.com) and expect the client to resolve the name to an IP or does the server resolve the name first and only pass back the IP address? My server is on a private-address network but is also accessible from the public internet (via a NAT I think). Internal and external clients can reach the server with the same hostname (eg: ftp.domainname.com) and external and internal dns will resolve the same name to the correct external or internal ip accordingly. The problem is for external users, the server is responding with the internal IP for PASV. I can use MasqueradeAddress to return the public IP to fix the issue with external users, but then internal users are impacted. I was hoping that if I specify the domain name in MasqueradeAddress, I can indirectly make the server provide a different IP for external and internal users, but this doesn't seem to be working. This issue is side-stepped with a ftp client like Filezilla, which will balk at the returned private ip and try the public ip instead. But I need to make it work with Internet Explorer (oh yes), which is rather dumb. I thought about using <VirtualHost> entries with different MasqueradeAddress entries for internal and external connections each, but I don't think that would work as internal and external clients are both using the same hostname to reach the server. On proftpd 1.3.6c. Help? _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html