Re: Passive FTP not working with iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Stefanie Leisestreichler <stefanie.leisestreichler@xxxxxxxxxxxxxx> wrote:
> Thanks for your hint, Adel.
> Enabling the helper modules with echo 1 >
> /proc/sys/net/netfilter/nf_conntrack_helper did the trick, thank you very
> much.
>
> I am not quite sure if this is just enabling the helpers and loose will be

It enables auto-assignments of the helpers based on hard-coded numbers
(e.g. tcp 21 in case of ftp).

There are no other side effects.

> at its default == 0 or if this is setting loose=1 implicit?

No, tcp_loose is about mid-stream pickup (treating a connection as
ESTABLISHED even if we did not see initial syn packet).



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux