Filippo Zeus wrote:
thanks for your help at first !
yes. and i've tested tons of clients (ftp-ssl, filezilla, hated M$-IE).
unfortunatly tcpdump has confirmed my prefeeling.
Also, reading at proftpd log i can see that encrypted channel is
switched off after PASS command
and stay on only for the data channel.
I'm not shure, cause i'm not a developer, but i think that
ftp_conntrak module open a port *ONLY* if
it read first the USER command, then the PASS command, then PASV/PORT
commands
not simply if a (cleartext) PORT command came from the ftp client.
Please send a tcpdump.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
