LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: FTP via LVS: can log in but not 'ls'

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: FTP via LVS: can log in but not 'ls'
From: Graeme Fowler <graeme@xxxxxxxxxxx>
Date: Wed, 23 Aug 2006 15:40:20 +0100
On 23/08/2006 15:22, Keith Edmunds wrote:
<snip>
A pointer to where to look to resolve this would be appreciated, thanks.

1. Ensure the LVS FTP helper is loaded (you have).
2. Make sure that you define (or make a note of) the range of ports your FTP server uses for data connections (this varies from server to server).
3. Ensure that you will accept traffic to those ports on your director.

I learned this the hard way :-/

If the packets are rejected by netfilter/iptables on the director, the FTP helper never sees them so the connections will almost never work.

In your example, the director has dropped the inbound SYN to port 13330, thus the data connection will never start.

Graeme

<Prev in Thread] Current Thread [Next in Thread>