On Tuesday 2008-05-27 00:05, Jan Engelhardt wrote: >On Monday 2008-05-26 22:00, Filippo Zeus wrote: > >> I'm not shure, cause i'm not a developer, but i think that ftp_conntrak module >> open a port *ONLY* if >> it read first the USER command, then the PASS command, then PASV/PORT commands >> not simply if a (cleartext) PORT command came from the ftp client. > >It sets up an expectation once it sees PORT/EPRT/PASV/EPSV, >regardless of USER/PASS. > >It does *NOT* recognize the TLS commands SSCN/CPSV, >which is probably the problem, if you claim that the control >connection is clear-text. Ah never mind, SSL using SSCN/CPSV seems obsolete since long. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
