From 8c0fe063a78d5d69ed746563e00ba84918a00b35 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 25 Jul 2014 09:03:23 -0700 Subject: [PATCH] Another tweak to the FTP module documentation Signed-off-by: Tom Eastep --- docs/FTP.xml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/FTP.xml b/docs/FTP.xml index dcdfe9c77..e5aabdf35 100644 --- a/docs/FTP.xml +++ b/docs/FTP.xml @@ -440,13 +440,16 @@ DNAT net loc:192.168.1.2:21 tcp 12345 { helper=ft That entry will accept ftp connections on port 12345 from the net and forward them to host 192.168.1..2 and port 21 in the loc zone. - /etc/shorewall/rules: + /etc/shorewall/conntrack: #ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH # PORT(S) PORT(S) GROUP ... CT:helper:ftp loc - tcp 12345 + That rule automatically associates the ftp helper with TCP port + 12345 from the 'loc' zone. + Otherwise, read on.