From: Andreas Unterkircher <unki@netshadow.at>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] passive FTP trafic control
Date: Fri, 11 Nov 2005 21:20:52 +0000 [thread overview]
Message-ID: <43750B34.9010409@netshadow.at> (raw)
In-Reply-To: <20051111132016.5299021b@pulsar.inexo.com.br>
You could try to match on helper within iptables. Should be something like
iptables -A FORWARD --match conntrack --ctproto tcp --ctstate
RELATED,ESTABLISHED --match helper --helper ftp -j CLASSIFY ....
Perhaps this will match your data channel.
Cheers,
Andreas
DervishD wrote:
> Hi Ethy :)
>
> * Ethy H. Brito <ethy.brito@inexo.com.br> dixit:
>
>
>>How to make shure that only FTP RELATED packets will be CLASSIFY'ed??
>>
>>
>
> I can only suggest that you limit the source ports available to
>passive FTP. In my FTP server this can be configured, but probably in
>other servers you can do it too. Once you do this, it's quite easy to
>setup a "tc filter" to mark packages (or iptables if you prefer).
>
> Raúl Núñez de Arenas Coronado
>
>
>
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
next prev parent reply other threads:[~2005-11-11 21:20 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-11-11 15:20 [LARTC] passive FTP trafic control Ethy H. Brito
2005-11-11 20:38 ` DervishD
2005-11-11 21:20 ` Andreas Unterkircher [this message]
2005-11-17 21:46 ` Piotr Chytla
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=43750B34.9010409@netshadow.at \
--to=unki@netshadow.at \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.