LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: ip_masq_ftp nat passive

To: Jeremy Kusnetz <JKusnetz@xxxxxxxx>
Subject: Re: ip_masq_ftp nat passive
Cc: "'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Julian Anastasov <ja@xxxxxx>
Date: Wed, 23 May 2001 21:54:21 +0300 (EEST)
        Hello,

On Wed, 23 May 2001, Jeremy Kusnetz wrote:

> I am having problems with passive mode FTP under kernel 2.2.16 using
> LVS-NAT.
>
> When in passive mode the ftp server returns the RIP, not the VIP, and
> clients from the outside cannot see the RIP.

        Are you sure the packets from the real server go through the
LVS box? What is the real server's default gateway? May be you make
your tests from the LAN?

> I've loaded ip_masq_ftp.  I saw a post about running `/sbin/modprobe
> ip_masq_ftp in_ports=21`, but in_ports comes back as an invalid parameter,
> instead I tried `/sbin/modprobe ip_masq_ftp ports=21` which loads okay, but
> doesn't fix my problem.

        in_ports is in 2.2.19+

> Doing an lsmod, shows me that when people ftp in, that the module is being
> used.
>
> Here is how I'm starting lvs for ftp.
> ipvsadm -A -t 216.xxx.xxx.xxx:ftp -s wlc -p 540
> ipvsadm -a -t 216.xxx.xxx.xxx:ftp -R 10.75.0.9:ftp -w 5 -m
> ipvsadm -a -t 216.xxx.xxx.xxx:ftp -R 10.75.32.9:ftp -w 5 -m
> ipvsadm -a -t 216.xxx.xxx.xxx:ftp -R 10.75.64.9:ftp -w 5 -m

        It should work, the ip_masq_ftp is the only requirement for
Linux 2.2 LVS-NAT

Regards

--
Julian Anastasov <ja@xxxxxx>



<Prev in Thread] Current Thread [Next in Thread>