passive FTP trafic control

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi All

How to classify packets belonging to a FTP session?
Port 21 session is easy. but what about data transfers? Their port numbers 
(both) are above 1024. 

I was thinking about ip_conntrack_ftp. Something like:

iptables -A FORWARD -p tcp --sport 1024: --dport 1024:  \
	-m state --state ESTABLISHED,RELATED -j CLASSIFY --set-class X:Y

But what if I also have ip_conntrack_irc, for instance. IRC packets will also
be directed to X:Y class since they are RELATED packets.

How to make shure that only FTP RELATED packets will be CLASSIFY'ed??


-- 

Ethy H. Brito         /"\
InterNexo Ltda.       \ /  CAMPANHA DA FITA ASCII - CONTRA MAIL HTML
+55 (12) 3941-6860     X   ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL
S.J.Campos - Brasil   / \ 
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux