On Monday 2008-05-26 22:00, Filippo Zeus wrote: > I'm not shure, cause i'm not a developer, but i think that ftp_conntrak module > open a port *ONLY* if > it read first the USER command, then the PASS command, then PASV/PORT commands > not simply if a (cleartext) PORT command came from the ftp client. It sets up an expectation once it sees PORT/EPRT/PASV/EPSV, regardless of USER/PASS. It does *NOT* recognize the TLS commands SSCN/CPSV, which is probably the problem, if you claim that the control connection is clear-text. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
