ftp_conntrack and encrypted FTP

ftp_conntrack and encrypted FTP

[Leonardo Rodrigues Magalhães]

[-- Attachment #1: Type: text/plain, Size: 585 bytes --]


    Hello Guys,

    I'm having some troubles with encrypted FTP connections. As i could 
imagine, conntrack_ftp and nat_ftp are not being able of recognizing the 
correct ports to open because the connection is encrypted and the PASV 
information is not seen by the modules.

    I dont think so ..... but is there any way of working around this ??

-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it






[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 5589 bytes --]

Re: ftp_conntrack and encrypted FTP

[Laszlo Attila Toth]

Leonardo Rodrigues Magalhães wrote:
> 
>    Hello Guys,
> 
>    I'm having some troubles with encrypted FTP connections. As i could 
> imagine, conntrack_ftp and nat_ftp are not being able of recognizing the 
> correct ports to open because the connection is encrypted and the PASV 
> information is not seen by the modules.
> 
>    I dont think so ..... but is there any way of working around this ??
> 

Use unencrypted ftp (which is insecure and not recommended) or forget 
conntrack for this because encrypted channels cannot be on the fly 
decrypted without the keys used for encryption.

-- 
Attila

Re: ftp_conntrack and encrypted FTP

[Martijn Lievaart]

Leonardo Rodrigues Magalhães wrote:
>
>    Hello Guys,
>
>    I'm having some troubles with encrypted FTP connections. As i could 
> imagine, conntrack_ftp and nat_ftp are not being able of recognizing 
> the correct ports to open because the connection is encrypted and the 
> PASV information is not seen by the modules.
>
>    I dont think so ..... but is there any way of working around this ??
>

Use scp instead.

HTH
M4

Re: ftp_conntrack and encrypted FTP

[Покотиленко Костик]

В Птн, 09/11/2007 в 14:09 +0100, Martijn Lievaart пишет:
> Leonardo Rodrigues Magalhães wrote:
> >
> >    Hello Guys,
> >
> >    I'm having some troubles with encrypted FTP connections. As i could 
> > imagine, conntrack_ftp and nat_ftp are not being able of recognizing 
> > the correct ports to open because the connection is encrypted and the 
> > PASV information is not seen by the modules.
> >
> >    I dont think so ..... but is there any way of working around this ??
> >
> 
> Use scp instead.

FTP dies.

-- 
Покотиленко Костик <casper@meteor.dp.ua>