Use ftp proxy module like this (no need to open up 1024-65535):

dennis2 (Dennis)
# insmod ip_masq_ftp

Your Linux machine maybe uses passive mode by default, but in windows it is default to active. Even though you set INPUT, OUTPUT and FORWORD to accept by default, the gateway still have no idea what the connection from the server is for. So you still need ftp proxy. Or, use passive ftp. To change the mode to passive in windows' ftp client, type the following at the ftp prompt:

literal PASV

Note that if you use passive mode, there's no need for ftp proxy, that is for active ftp only. Also, set the policy to accept by default is not a good security measure, unless you are just playing with it.

Like the previous poster said, you need to take a good look at Linux Document Project (

2001-6-26 -05:00

回到话题: 用LINUX网关,打开单向NAT之后发现无法建立WINDOWS客户端FTP连接的数据传输通道,哪位大侠能帮我,谢谢。

回到论坛: HOME枫下论坛枫下论坛主坛工作学习IT技术讨论