On Tuesday, August 28, 2007 Graeme Fowler wrote:
> On Tue, 2007-08-28 at 10:43 -0600, Dan Brown wrote:
> > What am I doing wrong?
>
> Have you loaded the kernel FTP helper module?
>
> modprobe -v ip_vs_ftp
Well I had thought that was only for LVS-NAT applications but I tried it
anyways with no apparent luck. The HOWTO sections on FTP seem to cover 95%
LVS-NAT situations which I see little correspondence to my own
unfortunately.
I can dir/ls, get, (and many other commands), but not actually "put" a file
to the ftp service. When I attempt that I get the following via tcpdump.
13:34:33.452370 IP 70.64.128.194.58822 > 216.94.150.36.10025: .
1448:2896(1448) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>
13:34:33.456580 IP 70.64.128.194.58822 > 216.94.150.36.10025: FP
2896:3667(771) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>
I do not ignore output btw, since I was just adding a rule to my iptables
rules when I realized I already had something to cover it at the end of my
iptables rules.
iptables -A OUTPUT -o $EXT_INT -m state --state NEW,ESTABLISHED,RELATED
-j ACCEPT
The one thing I have not yet tried is fwmarks which I am currently looking
into.
___________________________________________________
Dan Brown
danb@xxxxxx
|