SSH port forwarding can't work with vsftpd

From: FJY (fjye2001_at_yahoo.com)
Date: 10/21/03


Date: Tue, 21 Oct 2003 04:10:28 GMT

I have a Linux box inside some firewall which blocks the traffic to port
under 1024. To bypass this firewall, I run ssh port forwarding on it,
like this:
ssh -g -L 10000:mylinuxbox:22 user@firewall
For example, if port 10000 is not blocked by the firewall, I can access my
Linux box via ssh (port 22) remotely by setting up port forwarding as
above.

However, if I run vsftpd (not wu-ftpd, I guess that'd work) on my Linux
machine, and I again use ssh port forwarding at the firewall:
ssh -g -L 20000:mylinuxbox:21 user@firewall
I can't access my FTP server from outside the firewall even if the FTP
client is in passive mode. The situation is, I can log on the FTP server
remotely, but I can't use ls or get or put. If I do so, the FTP client
hangs up after printing out "227 Entering Passive Mode" and IP/port.

Anyway has experience with this? Maybe there's a lot of confusion here. I
can clarify the case if necessary.
Thanks in advance.

Regards,
FYJ



Relevant Pages

  • Re: MS VPN through Linux Firewall
    ... You will need to allow GRE to pass through your firewall and also PPTP. ... There is a fairly detailed resource about allowing VPN connections through a ... > I am running Microsoft Small Business Server 2000 behind a Linux ... > I have been using TeraTerm Pro and ttssh (with port forwarding) to ...
    (comp.security.firewalls)
  • Re: Can I restrict incoming mails to only come from two machines?
    ... My firewall is on another machine - that is the "not flexible enough" ... I am port forwarding from the other machine to the linux box with ... Doesn't sendmail have any configurations to restrict hosts that ...
    (comp.mail.sendmail)
  • Re: Another Newbie asking "Which Anti-Virus Sofware is the Best?"
    ... There's no such thing as a secure system. ... Port Forwarding ... configure essentially opens up a small door in your firewall. ... Inexpensive external router/fw products for the home user market ...
    (alt.comp.anti-virus)
  • Re: Default firewall question
    ... > installed firestarter to serve as my firewall because I need to enable ... > port forwarding and have certain ports open but want the rest of my ... > gnome-lokkit both with ...
    (linux.redhat)
  • bash script and SIGHUP
    ... I was trying to write a small script to start ssh port forwarding and ... I start the port forwarding, sleep and start x2vnc which allows me to ... Computer Systems Institute ...
    (comp.unix.shell)