Re: [PATCH] ipvs: ip_vs_ftp depends on nf_conntrack_ftp helper

[Simon Horman <horms@xxxxxxxxxxxx>]

On Sat, Jul 07, 2012 at 08:32:12PM +0300, Julian Anastasov wrote:
>       The FTP application indirectly depends on the
> nf_conntrack_ftp helper for proper NAT support. If the
> module is not loaded, IPVS can resize the packets for the
> command connection, eg. PASV response but the SEQ adjustment
> logic in ipv4_confirm is not called without helper.
> 
> Signed-off-by: Julian Anastasov <ja@xxxxxx>

Thanks, I have added this to my ipvs-next tree
for inclusion in 3.6.

> ---
>  net/netfilter/ipvs/Kconfig |    3 ++-
>  1 files changed, 2 insertions(+), 1 deletions(-)
> 
> diff --git a/net/netfilter/ipvs/Kconfig b/net/netfilter/ipvs/Kconfig
> index f987138..8b2cffd 100644
> --- a/net/netfilter/ipvs/Kconfig
> +++ b/net/netfilter/ipvs/Kconfig
> @@ -250,7 +250,8 @@ comment 'IPVS application helper'
>  
>  config       IP_VS_FTP
>       tristate "FTP protocol helper"
> -        depends on IP_VS_PROTO_TCP && NF_CONNTRACK && NF_NAT
> +     depends on IP_VS_PROTO_TCP && NF_CONNTRACK && NF_NAT && \
> +             NF_CONNTRACK_FTP
>       select IP_VS_NFCT
>       ---help---
>         FTP is a protocol that transfers IP address and/or port number in
> -- 
> 1.7.3.4
> 
--
To unsubscribe from this list: send the line "unsubscribe lvs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html