From owner-freebsd-questions Wed Mar 1 18:30:58 2000 Delivered-To: freebsd-questions@freebsd.org Received: from adsl-206-170-238-103.dsl.lsan03.pacbell.net (adsl-206-170-238-103.dsl.lsan03.pacbell.net [206.170.238.103]) by hub.freebsd.org (Postfix) with ESMTP id 4C73437BFDE for ; Wed, 1 Mar 2000 18:30:53 -0800 (PST) (envelope-from mailsrv@rtscomputer.net) Received: from db (db.rp.com [192.168.1.2]) by adsl-206-170-238-103.dsl.lsan03.pacbell.net (8.9.3/8.9.3) with SMTP id SAA32327; Wed, 1 Mar 2000 18:29:27 -0800 (PST) (envelope-from mailsrv@rtscomputer.net) Message-ID: <00c601bf83ef$38cb4050$0201a8c0@rp.com> From: "Richard" To: "Bhishan Hemrajani" Cc: References: <200003020219.SAA16858@cytosine.dhs.org> Subject: Re: Having a Problem with NAT and FTP Date: Wed, 1 Mar 2000 18:30:04 -0800 Organization: rTs Computer Systems MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Thank you. Your answer makes sense. Funny thing though, I had a LINUX Box before the FreeBSD firewall and LINUX's masquerading was able to do it. I guess, there are advantages and disadvantages to every OS. Thanks -- LINUX/UNIX/NT Consultant/Administrator Richard Pouncy Voice: 310-213-4RTS ICQ# : 31450231 http://www.rtscomputer.net ----- Original Message ----- From: "Bhishan Hemrajani" To: "Richard" Cc: Sent: Wednesday, March 01, 2000 6:19 PM Subject: Re: Having a Problem with NAT and FTP > This is unavoidable. For some ftp servers, you will not have to do > this. But rarely, some you will. > > The reason for this, is that when an ftp server sends a directory > listing it sends it to a specified port. However, nat on the host > computer doesn't know to open the port. Therefore, you don't get > the listing and the ftp server idles out. > > PASV makes the client establish a connection to the server, therefore > nat knows to open the port because the client told it to. > > Hope this helps. > > --bhishan > > [Charset iso-8859-1 unsupported, filtering to ASCII...] > > Hello All, > > > > I have FreeBSD's Network Address Translation (NAT) working very well > > with HTTP, SMTP and others, but I'm have a problem getting FTP to work > > correctly. In order to FTP from a workstation on the LAN, the FTP > > client has to be place in passive mode. Otherwise, they just sit there. > > > > I have the following enable in my rc.firewall script. > > > > if [ "X${natd_enable}" = X"YES" -a "X${natd_interface}" != X"" ]; then > > $fwcmd add divert natd all from any to any via ${natd_interface} > > fi > > > > > > Thanks. > > -- > > LINUX/UNIX/NT Consultant/Administrator > > Richard Pouncy Voice: 310-213-4RTS > > ICQ# : 31450231 > > http://www.rtscomputer.net > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message