On Fri, Jun 16, 2006 at 07:09:20PM +0200, rudolf wrote:
> I gave up the ftp-proxy thing - all I need is to comment out the first 
> line in /etc/ipnat.conf:
> #map xennet1 10.0.0.0/24 -> xx.xx.xx.xx/32 proxy port ftp ftp/tcp
> map xennet1 10.0.0.0/24 -> xx.xx.xx.xx/32 portmap tcp/udp 10000:20000
> map xennet1 10.0.0.0/24 -> xx.xx.xx.xx/32

Of course. If you are able to configure all ftp clients behind it to
passive ftp, then it is the simplest solution.

> and then I am able to do passive ftp without problems. The ftp-proxy 
> solution is too complex for my needs.

Did you have problems with it?

Pavel