Slow FTP through NAT box...

Slow FTP through NAT box...

[Marian Stepka]

Hi List;

I'm fighthing with NATing issues almost 3 days. Now I'm facing problem,
that It take extremly long to get passive ftp access to the machine
after NAT box. I can access it just using ftp command line client from
Linux machine and none from Win working even PASV mode is enabled. But
anyway initial handshaking take a pretty long, let's say 2 minutes. Box
do nothing else just translate range from priavte IP range to normal
Inet range.

Other services works pretty well as ssh, web. But FTP driving me
slightly mad. Do anybody out there have any idea what I did wrong or
when I can find some info about? Probably I read whole Google. Or I'm
blind or what...

Marian

--
*IN ROOT WE TRUST*
Marian Stepka <mailto:stepka@tris.sk>

RE: Slow FTP through NAT box...

[Stewart Thompson]

Hi Marian:

	Are you loading ip_conntrack_ftp and ip_nat_ftp?
What to you get if you do an lsmod, are they there?

Stu..........


-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Marian Stepka
Sent: September 13, 2002 7:07 PM
To: netfilter@lists.netfilter.org
Subject: Slow FTP through NAT box...

Hi List;

I'm fighthing with NATing issues almost 3 days. Now I'm facing problem,
that It take extremly long to get passive ftp access to the machine
after NAT box. I can access it just using ftp command line client from
Linux machine and none from Win working even PASV mode is enabled. But
anyway initial handshaking take a pretty long, let's say 2 minutes. Box
do nothing else just translate range from priavte IP range to normal
Inet range.

Other services works pretty well as ssh, web. But FTP driving me
slightly mad. Do anybody out there have any idea what I did wrong or
when I can find some info about? Probably I read whole Google. Or I'm
blind or what...

Marian

--
*IN ROOT WE TRUST*
Marian Stepka <mailto:stepka@tris.sk>

Re: Slow FTP through NAT box...

[Axel Heinrici]

Hello

> Hi List;
>
> I'm fighthing with NATing issues almost 3 days. Now I'm facing
> problem, that It take extremly long to get passive ftp access to the
> machine after NAT box. I can access it just using ftp command line
> client from Linux machine and none from Win working even PASV mode is
> enabled. But anyway initial handshaking take a pretty long, let's say
> 2 minutes. Box do nothing else just translate range from priavte IP
> range to normal Inet range.
>
> Other services works pretty well as ssh, web. But FTP driving me
> slightly mad. Do anybody out there have any idea what I did wrong or
> when I can find some info about? Probably I read whole Google. Or I'm
> blind or what...
Take a look at the ident service. Enable it or block it with "-j 
REJECT". Otherwise you sometimes have to wait for the ident connection 
to time out

Axel