Re: [PATCH] netfilter: Implement RFC 1123 for FTP conntrack

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Friday 2011-05-06 19:38, Jeff Mahoney wrote:

>The FTP conntrack code currently only accepts the following format for
>the 227 response for PASV:
>227 Entering Passive Mode (148,100,81,40,31,161).
>
>It doesn't accept the following format from an obscure server:
>227 Data transfer will passively listen to 67,218,99,134,50,144
>
>From RFC 1123: The format of the 227 reply to a PASV command is not 
>well standardized.  In particular, an FTP client cannot assume that the 
>parentheses shown on page 40 of RFC-959 will be present (and in fact, 
>Figure 3 on page 43 omits them).  Therefore, a User-FTP program that 
>interprets the PASV reply must scan the reply for the first digit of 
>the host and port numbers.
>
>This patch adds support for the RFC 1123 clarification[...]
>
>Tracked in: https://bugzilla.novell.com/show_bug.cgi?id=466279

"You are not authorized to access bug #466279."
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux