Re: Active ftp w/ lvs NAT broken?

[Joseph Mack NA3T <jmack@xxxxxxxx>]

On Wed, 23 Nov 2005, Graeme Fowler wrote:

> Yes, netfilter/iptables does interact with LVS.
>
> Under LVS-NAT you need to make sure that the traffic 
> exiting the director on the client side is what the client 
> expects. That means SNAT (or masquerade).
the original implementation doesn't need any iptables rules; 
the ftp helper and the lvs code handle it all. Unless 
there's a change in spec (intentional that no-one has made 
clear, or unintentional through bitrot), you still shouldn't 
need iptables rules.
Joe

--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml 
Homepage http://www.austintek.com/ It's GNU/Linux!