i've got the following setup
IP Virtual Server version 1.0.6 (size=1048576)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 172.24.1.240:http rr
-> 192.168.1.15:http Masq 1 0 0
TCP 172.24.1.252:http wlc persistent 1200
-> 192.168.1.25:http Masq 1 0 0
TCP 172.24.1.251:http wlc persistent 1200
-> 192.168.1.20:http Masq 2 0 0
-> 192.168.1.10:http Masq 3 0 0
TCP 172.24.1.240:ftp wlc persistent 360
-> 192.168.1.20:ftp Masq 1 2 1
within my lvs script I do...
#load kernel modules
modprobe ip_vs_ftp
if I use ws_ftp pro my data connection keeps getting reset
on ncftp I get:
Data connection from 192.168.1.20:1464 did not originate from remote server
172.24.1.240:21!
List failed.
I don't have any iptables rules set.
But if I set the following rule
iptables -t nat -A POSTROUTING -s $INT_NET -j MASQUERADE
(where $INT_NET is the internal network...)
ws_ftp pro works but not in pasv mode.
I get the same error as above on ncftp but the first ip is the ip for eth0.
the web portions work OK.
|