🚀 go-pugleaf

To have FTP work with NAT (both incoming and outgoing) properly, your
firewall should be a stateful type. FTP only use port 21 for initial
connection and commands. The subsequent data ports are determined by the FTP
client (in passive mode) using the "PORT" command. It tells the server to
call back to a port specified . A proper firewall will know how to intercept
the information and open that port temporarily so the "DIR" or "LS" (which
is really consist of a PORT and NLIST command) can be successful. Many
firewalls, including GuardIT from Computer Associates, and Firewall 1 from
Check Point can do that.

Lind

Beau Clark <bmclark@sprintparanet.com> wrote in message
news:7vab32$ob3$1@birch.prod.itd.earthlink.net...
> I only have one real world address.  So I am running Network address
> Translation.  I set up a FTP server internally with a 10.*.*.* address.
On
> the router, I set it to redirect all traffic on port 21 to the proper
> internal 10.*.*.* address.  Externally when I try and connect to the FTP
> server.  I am able to connect, it processes my username and password, but
> then it will not let me upload or download files.  It also will not give
me
> a directory list.  I can change directorys, I just can not do anything
else
> on the FTP server.  If I connect in passive mode, it authenticates me and
> then tries to switch to the 10.*.*.* address with the random port number.
> Any ideas on how to work around this would be greatly appreciated.
>
> Thanks
>
>
>