Re: Marking ftp inbound traffic is impossible ?

[Andy Furniss <andy.furniss@xxxxxxxxxxxxx>]

ngo giang wrote:
> Hello,
>  
> I searched the archives mailing list of LARTC. Everyone discussed about marking outbound ftp 
>  
> traffic . I could not  find any thread discussed about marking inbound ftp traffic.
>  
>  With inbound ftp traffic , we don't know the random ports specified by ftp servers in passive mode ?
>  
> So marking inbound ftp traffic is impossible ?
>  
> If it is possible, can you tell me,
>  
> Thanks in advance,
>  
> nhgiang

There's an ftp protocol netfilter match - if you are conntracking maybe 
that will do it - never tested it myself.

Andy.


_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/