That's true ... proftpd has been configured to encrypt auth+data
so the PORT command is sent in cleartext way.
I you read
question Using mod_tls, FTP sessions through my firewall now no longer
work. What's going on?
at http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
proftpd developers suggest to do this to fix this problem...
but it do not work.
please help
There's no bug, indeed.
Conntrack helper simply *can't* see the PORT command, since the packet
payload
is encrypted.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html