On Feb 28 2008 11:36, Jan Engelhardt wrote: >>> The module was certainly loaded, otherwise `conntrack -E` would >>> not have printed anything. >>> No parameters were specified, just `modprobe nf_conntrack_ftp`, >>> like I said. There is no way it should have analyzed port 2121 ftp. >> >>Any long forgotten nf_conntrack_ftp related option setting under >>/etc/modprobe.d/ or in /etc/modprobe.conf? > >I looked into /sys/module/nf_conntrack_ftp/parameters/ports >which only contains "21". I'm gonna stacktrace it now... > Ok issue solved ... a stray DNAT in the *OUTPUT* chain of the client. Man that one was hidden :) wonder when I added that. Thanks. - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html