tracking multiple ftp ports

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,

I need to track ftp connections on port 419 and also normal port 21 conns.
Ive probed doing "modprobe ip_conntrack_ftp ports=21,419"

ftp at port 21/tcp  seems to work as always did  but 419/tcp and its related 
conecctions still get dropped.

My tcpdump shows 419/tcp conns are authorized and get passed to the server but 
related data connections get dropped.

my rules are like these:
...
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -d <internal_normal_ftp_server> -p tcp -m tcp --dport 21 -j ACCEPT
-A FORWARD -d <internal_419_ftp_server> -p tcp -m tcp --dport 419 -j ACCEPT
...

Other rules (+500) and services run Ok,

Anyone knows about managing unusual ftp connections.

Thanks

-- 
---------------------------------------------
Clister UAH
---------------------------------------------


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux