From mboxrd@z Thu Jan 1 00:00:00 1970 From: Philip Craig Subject: Re: conntrack ftp fails to handle PORT (and PASV?) command when split over multiple TCP packets Date: Tue, 18 Nov 2008 13:32:11 +1000 Message-ID: <4922373B.9070605@snapgear.com> References: <49220C89.4040801@snapgear.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@vger.kernel.org To: Frank Bulk Return-path: Received: from rex.securecomputing.com ([203.24.151.4]:57896 "EHLO cyberguard.com.au" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1751657AbYKRDcN (ORCPT ); Mon, 17 Nov 2008 22:32:13 -0500 In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: Frank Bulk wrote: > Thanks for the pointer to frox. > > I'm not sure if the DSL modem vendor would add in this piece of opensource > software to their box, but we'll see. If you can insert the proxy between the DSLAM and the DSL modem, then that would work too. The proxy will rewrite the packets so that the DSL modem doesn't see the split command. Note that in either case, you'll have to avoid loading the ftp conntrack helper on the proxy machine for this to work, which may mean you'll need to use the TransparentData option for frox (but try without it first).