用VSFTPD架设.登陆疑问.

newsq

RH9.0  一个代理服务器,双网卡.外网IP固定.
网上找了好多的VSFTPD的文档,按要求配置好 vsftpd.conf
测试时,在本机上,127.0.0.1 可以登陆.用外网IP同样可以登陆.
但是用别的机子就登陆不了.
这个机子还带着100多台机子在上网.
rc.fw 脚本如下:
echo "1" > /proc/sys/net/ipv4/ip_forward

INET_IFACE="eth0"
INET_IP="X.X.X.X"
IPT="/sbin/iptables"

/sbin/depmod -a
/sbin/modprobe ip_tables
/sbin/modprobe iptable_nat
/sbin/modprobe ip_nat_ftp
/sbin/modprobe ipt_LOG

$IPT -P INPUT ACCEPT
$IPT -P FORWARD ACCEPT
$IPT -P OUTPUT ACCEPT
$IPT -t nat -P PREROUTING ACCEPT
$IPT -t nat -P POSTROUTING ACCEPT
$IPT -t nat -P OUTPUT ACCEPT
for TABLE in filter nat mangle ; do
$IPT -t $TABLE -F
$IPT -t $TABLE -X
done

$IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
for DNS in $(grep ^n /etc/resolv.conf|awk '{print $2}'); do
$IPT -A INPUT -p udp -s $DNS --sport domain -j ACCEPT
done

$IPT -N LOGDENY
#$IPT -A LOGDENY -j LOG --log-prefix "iptables:"
$IPT -A LOGDENY  -j DROP
$IPT -A INPUT -p tcp --dport 22 -j ACCEPT
$IPT -A INPUT -i ! lo -m state --state NEW,INVALID -j LOGDENY
if [ "$INET_IFACE" = ppp0 ]; then
$IPT -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE
else
$IPT -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to $INET_IP
fi

echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
#echo 1 > /proc/sys/net/ipv4/tcp_timestamps
#echo 1 > /proc/sys/net/ipv4/tcp_window_scaling
#echo 1 > /proc/sys/net/ipv4/tcp_sack
#echo 8388608 > /proc/sys/net/core/wmem_max
#echo 8388608 > /proc/sys/net/core/rmem_max
#echo "4096 87380 4194304" > /proc/sys/net/ipv4/tcp_rmem
#echo "4096 65536 4194303" > /proc/sys/net/ipv4/tcp_wmem

iptables -t nat -A PREROUTING -p udp -d 192.168.0.1 --dport 53 -j DNAT --to 61.134.1.4:53
iptables -t nat -A PREROUTING -p udp -d 192.168.0.1 --dport 53 -j DNAT --to 218.30.19.40:53

请教各位是哪里的问题.

newsq

郁闷很。....咋没人跟我说说呢？??