[ previous ] [ next ] [ threads ]
 
 From:  Chris Buechler <cbuechler at gmail dot com>
 To:  m0n0mza at gmail dot com
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] M0n0 and FTP nat
 Date:  Thu, 8 Sep 2005 23:42:22 -0400
On 9/8/05, Pablo Alonso <m0n0mza at gmail dot com> wrote:
> 
> Firewall -> Rules
> 
> WAN interface
>   Proto Source Port Destination Port Description
>   TCP  any       any  200.XX.XX.XX 20 FTP
>   TCP  any       any  200.XX.XX.XX 21 FTP
> 
>   TCP  any       any  192.168.XX.XX   20 FTP
>     TCP  any       any  192.168.XX.XX   21 FTP
> 

20 is only the source port on FTP data connections, opening that port
as a destination port is unnecessary.

check this out: 
http://wiki.m0n0.ch/wikka.php?wakka=PseudoFTP

-Chris