Ron Hardin writes...
> I have a NT server sitting behind a FW-1 gateway. The group that is
> responsible for the server wishes to permit FTP access. This host is
> on a seperate enet segment off a quad port in my Sun host. NAT is
> in force for all host behing the firewall.
>
> When a ftp session is initiated from the outside (say with Netscape)
> the host is contacted, but the illegal IP (not xlated) and associated
> port is passed back to the browser. Needless to say the ftp session
> fails. Any suggestions where to look for the solution?
I think the problem is the address translation mode. You're probably using
FWXT_HIDE, which translates "on demand". I don't remember the name of
the other mode, but you need to set up the address of the FTP server with
a "fixed" translation.
Mike Jones
Sr. Network Computing Advisor
UNIFIED Technologies
|
|