IPNAT and ftp.

[Xavier Beaudouin <xavier_(_dot_)_beaudouin_(_at_)_ippolis_(_dot_)_fr>]

Hi !

I'm gonna try to use IP with openbsd/x86. All is working okay but I
cannot use IPNAT without any proxy. 

My /etc/ipnat.rules look like this... :

---8<---------------------
# $OpenBSD: ipnat.rules,v 1.1 1998/02/18 22:46:25 deraadt Exp $
#
# See /usr/share/ipf/nat.1 for examples.
# edit the nat= line in /etc/rc.conf to enable Network Address
Translation

map de0 10.10.0.0/24 -> 10.0.0.1/32 portmap tcp/udp 10000:19999
map de0 10.10.0.0/24 -> 10.0.0.1/32
map de0 192.168.0.0/16 -> 10.0.0.1/32 portmap tcp/udp 20000:65000
map de0 192.168.0.0/16 -> 10.0.0.1/32

---8<----------------------

de0 is the NIC in the internet side, and de1 is the NIC in the intranet
side.

There is in the intranet side two main IP classes :

 o an C class 10.10.0.0/24 (an old one)
 o an B class 192.168.0.0/16 (the new IP address of the company)

The main problem with ftp can be see there :

230-
230 Guest login ok, access restrictions apply.
ftp> dir
500 Illegal PORT Command
500 Can't build data connection: no PORT specified

I've got exactly the same problem when the FTP is in PASSIVE mode....

Could someone can gimme a hint ?

Thanks

/Xavier