I have just moved my servers to ESX 3.5i.

I have a SuSE 10.2 Enterprise server whish should have 3 functions : -

(a) A Forum
(b) Internet Connection Sharing
(c) Firewall

1 and 2 work 100%

Now I have a Red Hat 5.2 Server which is supposed to be the FTP box on the NetWork. I've installed VSFTPD and disable anonymous. I tested it and it works 100%

Back to the SuSE box, IP Forwarding is enabled and Masquerading.

I add the Ports 20 and 21 to the Redirect and set them to redirect to the IP Address of the Red Hat Box. IT DOESN'T WORK!

In Red Hat there is a Firewall rule for FTP. this is enabled and I enabled Ports 20 and 21 in the SuSE Firewall (as FTP is conspicuously absent).

What am I doing wrong? I've tried PORT and PASV and neither work. I both cases I get a socket error.

Help would be appreciated.

One thing to check is that you have the `nf_conntrack' module loaded. There may be others like `nf_conntrack_ipv4' and `nf_conntrack_ftp' needed as well. Before I had wireless installed on my desktop, I used my laptop to route traffic to the wireless router for the desktop. Forwarding didn't work until I modprobed the conntrack module. The name of the module may depend on which kernel you have. Perhaps ip_conntrack instead.

----

If you are using vsftp, then look at for `vsftpd' instead of 'ftp' listed in the firewall settings.