Use ftp proxy module like this (no need to open up 1024-65535):

dennis2 (Dennis)
# insmod ip_masq_ftp

Your Linux machine maybe uses passive mode by default, but in windows it is default to active. Even though you set INPUT, OUTPUT and FORWORD to accept by default, the gateway still have no idea what the connection from the server is for. So you still need ftp proxy. Or, use passive ftp. To change the mode to passive in windows' ftp client, type the following at the ftp prompt:

literal PASV

Note that if you use passive mode, there's no need for ftp proxy, that is for active ftp only. Also, set the policy to accept by default is not a good security measure, unless you are just playing with it.

Like the previous poster said, you need to take a good look at Linux Document Project (http://www.linuxdoc.org).

2001-6-26 -04:00
This post has been archived. It cannot be replied.
Page address has been copied. To share, click to copy page address.
Share Online by QR Code

Back To Topic: 用LINUX网关,打开单向NAT之后发现无法建立WINDOWS客户端FTP连接的数据传输通道,哪位大侠能帮我,谢谢。

Back To Forum: HOME枫下论坛枫下论坛主坛工作学习IT技术讨论