Can netfilter conntrack ftp FXP ?

Can netfilter conntrack ftp FXP ?

[Gary Bai]

Hi all,
  Good day !
  I found ftp-fxp.patch for kernel-2.4.x, but I didn't find any patchs
for kernel-2.6.x.
  And I tried to transmit two files between two FTP servers, but it's failed.
  Why so many conntrack_helpers except fxp ?
  rgds,
  Platinum

Re: Can netfilter conntrack ftp FXP ?

[Pascal Hambourg]

Hello,

Gary Bai a écrit :
>   And I tried to transmit two files between two FTP servers, but it's failed.

Try loading the FTP conntrack module ip_conntrack_ftp or 
nf_conntrack_ftp with parameter loose=1 on all involved machines (i.e. 
client and both servers).

>   Why so many conntrack_helpers except fxp ?

Because it is considered insecure.

Re: Can netfilter conntrack ftp FXP ?

[Gary Bai]

Hi, Pascal

  I reloaded nf_conntrack_ftp with the parameter loose=1 on the ftp
server, but it can't work well.
  I use FlashFXP to login the same ftp server with two different ID,
so it's my "all involved machines".
  Then, I drag a file from the left window to the right, but....

[R] TYPE I
[R] 200 Type set to I
[L] PASV
[L] 227 Entering Passive Mode (10,1,0,1,160,244).
[R] PORT 10,1,0,1,160,244
[R] 200 PORT command successful
[R] STOR daemon410-x86.exe
[L] 421 No transfer timeout (300 seconds): closing control connection
[L] Transmission Fail!
[L] Connection Lost: FTP Public
[R] Connection Lost: FTP Private

2008/3/30, Pascal Hambourg <pascal.mail@plouf.fr.eu.org>:
> Hello,
>
>  Gary Bai a écrit :
>
> >   And I tried to transmit two files between two FTP servers, but it's failed.
>
>
> Try loading the FTP conntrack module ip_conntrack_ftp or
>  nf_conntrack_ftp with parameter loose=1 on all involved machines (i.e.
>  client and both servers).
>
>
>  >   Why so many conntrack_helpers except fxp ?
>
>
> Because it is considered insecure.
>
> --
>  To unsubscribe from this list: send the line "unsubscribe netfilter" in
>  the body of a message to majordomo@vger.kernel.org
>  More majordomo info at  http://vger.kernel.org/majordomo-info.html
>