SSH Protocol mismatch

[CryBaby]

> OS: FreeBSD 4.11-STABLE #3: Fri Jan 14 23:53:07 CST 2005
Firewall: ipfilter + ipfw
NAT: ipnat

### % less /etc/ipnat.conf ###
map vr0 192.168.0.0/24 -> 0/32 portmap tcp/udp auto
map vr0 192.168.0.0/24 -> 0/32

### /etc/ipf.conf ### (vr0: outer interface, rl0: inner interface)
block in log quick all with short
block in log quick all with ipopts

pass in on rl0 all
pass out on rl0 all
pass in on lo0 all
pass out on lo0 all

pass in log on vr0 all
pass out log on vr0 all

pass out log on vr0 proto icmp all keep state
pass out log on vr0 proto tcp/udp from any to any keep state

pass in quick on vr0 proto tcp from any to any port = ftp-data keep state
pass in quick on vr0 proto tcp from any port = ftp-data to any port > 1023 keep state





---
CryBaby <mailinglist at ms94.url.com.tw>