On 10.05.2014 02:31, Bruno de Paula Larini wrote:
Wow, thank you Mart! I didn't really think that the rp_filter would have anything to do with it, but in fact it had! Even though I had disabled for "all" interfaces, it seems that the rp_filter files for each interface overlaps "all". So, echo 0 > /proc/sys/net/ipv4/conf/eth2/rp_filter solved the problem of disappearing packets. But unlike the eth1 interface, the RELATED state isn't allowing (or recognizing) the data channel. After doing a DNAT from port 49152 to 65535, the default data ports for MS FTP, I can now successfully connect through the second interface. I don't think there's a workaround for that, right? Even so, I'm glad you guys could help me. Thanks a lot!
-t raw -j CT --helper ftp-xyz (where xyz is your desired port number). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html