From: Philip Craig <philipc@snapgear.com>
To: Frank Bulk <frnkblk@iname.com>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: conntrack ftp fails to handle PORT (and PASV?) command when split over multiple TCP packets
Date: Tue, 18 Nov 2008 13:32:11 +1000 [thread overview]
Message-ID: <4922373B.9070605@snapgear.com> (raw)
In-Reply-To: <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh1IQAAAATbSgAABAAAADCtTUdIJ84Q59fOlKySo0wAQAAAAA=@iname.com>
Frank Bulk wrote:
> Thanks for the pointer to frox.
>
> I'm not sure if the DSL modem vendor would add in this piece of opensource
> software to their box, but we'll see.
If you can insert the proxy between the DSLAM and the DSL modem, then
that would work too. The proxy will rewrite the packets so that the
DSL modem doesn't see the split command.
Note that in either case, you'll have to avoid loading the ftp conntrack
helper on the proxy machine for this to work, which may mean you'll need
to use the TransparentData option for frox (but try without it first).
prev parent reply other threads:[~2008-11-18 3:32 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-11-15 21:13 conntrack ftp fails to handle PORT (and PASV?) command when split over multiple TCP packets Frank Bulk
2008-11-17 11:08 ` Jozsef Kadlecsik
2008-11-18 0:30 ` Philip Craig
2008-11-18 2:36 ` Frank Bulk
2008-11-18 3:32 ` Philip Craig [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4922373B.9070605@snapgear.com \
--to=philipc@snapgear.com \
--cc=frnkblk@iname.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.