LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: ip_masq_ftp nat passive

To: 'Julian Anastasov' <ja@xxxxxx>
Subject: RE: ip_masq_ftp nat passive
Cc: "'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Jeremy Kusnetz <JKusnetz@xxxxxxxx>
Date: Thu, 24 May 2001 15:55:51 -0400
BINGO!!!!!!! (well sorta)

It was my ftp server.

When going into passive mode it said:
   Passive mode on (x,x,x,x,x,x)
instead of:
   Entering Passive Mode (x,x,x,x,x,x)

I made this change on development, and it works great now!  I made the
change on my operational server and it still doesn't work.  What is
different.  Well, at least I'm half way there.  Thanks guys for your help!!!

-----Original Message-----
From: Julian Anastasov [mailto:ja@xxxxxx]
Sent: Thursday, May 24, 2001 12:58 PM
To: Jeremy Kusnetz
Cc: 'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'
Subject: RE: ip_masq_ftp nat passive



        Hello,

On Thu, 24 May 2001, Jeremy Kusnetz wrote:

> The 10.75.32.17 is just another RIP, I have 3 of them going right now, the
> results are the same no matter which RIP it hits.

        right

> I'll try using a different FTP server to see if that makes any difference.
>
> IP masq. is checked in the kernel, is it possible that I don't have all
the
> correct configs in the kernel set?  The configs run on the LVS box, and

        No more options to check

> ip_masq_ftp runs on the LVS box, it doesn't matter how the realservers are
> set up, correct?  From what I understand, the realservers don't even need
to
> be linux boxes for LVS-NAT, correct?

        Correct. The Netfilter guys use another approach when detecting
the 227 message in Linux 2.4, i.e. they try to ignore the message and to
use only the code (I'm not sure what is the final status of this handling
there). But in Linux 2.2 the word "Entering" is may be a requirement :(
You have to select another FTPd, IMO.


Regards

--
Julian Anastasov <ja@xxxxxx>


<Prev in Thread] Current Thread [Next in Thread>