Eric Gaumer <[EMAIL PROTECTED]> writes: > Nevermind, I'm an idiot... I never knew the ip_nat_ftp module existed. > Once I inserted this things started working with active FTP. > > Man you can't believe how much time I spent fooling around with this. I > just assumed active didn't work on a nat'ed gateway.
Don't worry about it, I was confused about first time I ran it too. If I remember correctly, ip_conntrack module gets loaded automatically when you use state in your iptables rules, but the ip_nat_ftp doesn't and have to be loaded manually (even though it should be obvious from your rules that you are doing NAT). -- John L. Fjellstad web: http://www.fjellstad.org/ Quis custodiet ipsos custodes -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]