[LARTC] FTP problem in Load Balancing.....

[LARTC] FTP problem in Load Balancing.....

[Sandeep Agarwal]

Hi,

Now the load balancing is working fine. Thanks for the list members.
Now two problems i am facing...

1. Users are not able to download the file though FTP connection.
    They are using IE from their desktop as they was doing earlier like
     ftp://ftp.site.com
     on to page right click & login as the user/pass allocated to them.
     They are able to see the contents at there but whenever they are
     going to download the file, msg appears as you do not have the 
privileges to download.
     Any pointer where I am wrong?

2. In case of nexthope down, I have to manually down the interface & do the 
required changes as suggested on the list.
    As my programming skills is zero, can someone send me the scripts to 
automatically this process?

Thank you
Sandeep 
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] FTP problem in Load Balancing.....

[Markus Schulz]

Am Montag, 3. April 2006 14:47 schrieb Sandeep Agarwal:
> Hi,
>
> Now the load balancing is working fine. Thanks for the list members.
> Now two problems i am facing...
>
> 1. Users are not able to download the file though FTP connection.
>     They are using IE from their desktop as they was doing earlier
> like ftp://ftp.site.com
>      on to page right click & login as the user/pass allocated to
> them. They are able to see the contents at there but whenever they
> are going to download the file, msg appears as you do not have the
> privileges to download.
>      Any pointer where I am wrong?

Seems, that her ftp-data connection seems to go out thru another uplink 
then the control connection. Most ftp-servers denies this 
(site-to-site) transfer mode. 

I don't know any available solution to this problem, except to route all 
ftp-traffic (data and control connection) thru a specific device.
For this you need to select all ftp-packets (iptables) and route them 
thru one of your uplink devices (simple ip rule add fwmark ... stuff)

For non-pasv ftp-transfer mode it's possible to implement a patch to the 
ftp-nat-helper module for selection proper (means the same) uplink 
device under respect of uplink device from control connection. But so 
far there is no patch i know about.

-- 
Markus Schulz
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc