Hi All!

I have the following problem - I want to install an FTP server behind a linux gateway.

I installed it (on a windows machine), but I cannot use it from the internet.
The linux box has no proxy, only iptables.
I have an ftp server running on linux, too (port 21)
I made the following settings:

iptables -t nat -A PREROUTING -p tcp -i eth0 -d NET-IP --dport 5002 -j DNAT --to ftp_machine_ip:21

I can connect to it (on port 5002), but when I try to download or list something, the client and server repllies, that the data channel cannot be made... :-( (I allow all outgoing connection form the internal network)

What is wrong?

Thanks: MaFa

what is the gateway on the outgoing machine ?
it should be the linux box

It is, of course.
The internal machine works well, can see the net, and so on....

Doesn't FTP use a 2nd connection for data control? Port 20 I think (by default). Sounds like that might be the issue.

slight

what ftp program are you using?

dont forget to allow forwarding too if your linux machine is a router

iptables -A FORWARD -i eth0 -p tcp --dport 5002 -j ACCEPT

and you need the ftp conntrack module installed...

ip_conntrack_ftp