RE: ip_masq_ftp nat passive

[Julian Anastasov <ja@xxxxxx>]

        Hello,

On Thu, 24 May 2001, Jeremy Kusnetz wrote:

> The 10.75.32.17 is just another RIP, I have 3 of them going right now, the
> results are the same no matter which RIP it hits.

        right

> I'll try using a different FTP server to see if that makes any difference.
>
> IP masq. is checked in the kernel, is it possible that I don't have all the
> correct configs in the kernel set?  The configs run on the LVS box, and

        No more options to check

> ip_masq_ftp runs on the LVS box, it doesn't matter how the realservers are
> set up, correct?  From what I understand, the realservers don't even need to
> be linux boxes for LVS-NAT, correct?

        Correct. The Netfilter guys use another approach when detecting
the 227 message in Linux 2.4, i.e. they try to ignore the message and to
use only the code (I'm not sure what is the final status of this handling
there). But in Linux 2.2 the word "Entering" is may be a requirement :(
You have to select another FTPd, IMO.


Regards

--
Julian Anastasov <ja@xxxxxx>