사설 IP에서 사설 IP

방화벽을 설치하고

사설IP (192.168.0.2)에 ftp서버를 설정하셨습니다.

외부 공인IP에서는 접속이 잘 되는데

외부의 또 다른 사설IP에서 이쪽으로 접속을 하면

연결은 되는데 자료의 주고 받음이 안되네요

ls만 쳐도 멈춰버립니다..

고수님들 아시는 분들 답변 부탁 드립니다.

#!/bin/sh
echo " - Verifying that all kernel modules are ok"
/sbin/depmod -a

/sbin/insmod ip_tables
/sbin/insmod ip_conntrack
/sbin/insmod ip_conntrack_ftp
/sbin/insmod iptable_nat
/sbin/insmod ip_nat_ftp
echo " - Enabling packet forwarding in the kernel"
echo "1" > /proc/sys/net/ipv4/ip_forward

echo " - Enabling dynamic addressing measures"
echo "1" > /proc/sys/net/ipv4/ip_dynaddr

echo " - Resetting firewall and setting the default FORWARD policy to DROP"
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -F INPUT
/sbin/iptables -P OUTPUT ACCEPT
/sbin/iptables -F OUTPUT

/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -F FORWARD

echo " - FWD Allow all connections OUT and only existing and related ones IN"
/sbin/iptables -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -
j ACCEPT
/sbin/iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
/sbin/iptables -A FORWARD -j LOG

echo " - Proidea Test"
/sbin/iptables -A INPUT -i eth0 -p icmp -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --dport 1024 -j DROP
/sbin/iptables -A INPUT -i eth0 -p tcp --dport sunrpc -j DROP

/sbin/iptables -A INPUT --protocol tcp --dport 21 -j ACCEPT

echo " - Enabling SNAT (MASQUERADE) functionality on eth0"
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

/sbin/iptables -t nat -A PREROUTING -p udp -d xxx.xxx.xxx.xxx --dport 1004 -j DN
AT --to 192.168.0.221
/sbin/iptables -t nat -A PREROUTING -p tcp -d xxx.xxx.xxx.xxx --dport 1004 -j DN
AT --to 192.168.0.221

echo -e "\nDone.\n"