thanks for your help at first !
yes. and i've tested tons of clients (ftp-ssl, filezilla, hated M$-IE).
unfortunatly tcpdump has confirmed my prefeeling.
Also, reading at proftpd log i can see that encrypted channel is
switched off after PASS command
and stay on only for the data channel.
I'm not shure, cause i'm not a developer, but i think that ftp_conntrak
module open a port *ONLY* if
it read first the USER command, then the PASS command, then PASV/PORT
commands
not simply if a (cleartext) PORT command came from the ftp client.
Did you verify, by using for example tcpdump, that th client is
actually using
CCC, sending commands in clear text?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
