LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LVS DR passive FTP Problems

To: "'LinuxVirtualServer.org users mailing list.'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LVS DR passive FTP Problems
From: "Dan Brown" <danb@xxxxxx>
Date: Tue, 28 Aug 2007 14:18:44 -0600
On Tuesday, August 28, 2007 Graeme Fowler wrote:
> On Tue, 2007-08-28 at 10:43 -0600, Dan Brown wrote:
> > What am I doing wrong?
> 
> Have you loaded the kernel FTP helper module?
> 
> modprobe -v ip_vs_ftp

Well I had thought that was only for LVS-NAT applications but I tried it
anyways with no apparent luck.  The HOWTO sections on FTP seem to cover 95%
LVS-NAT situations which I see little correspondence to my own
unfortunately.

I can dir/ls, get, (and many other commands), but not actually "put" a file
to the ftp service.  When I attempt that I get the following via tcpdump.

13:34:33.452370 IP 70.64.128.194.58822 > 216.94.150.36.10025: .
1448:2896(1448) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>
13:34:33.456580 IP 70.64.128.194.58822 > 216.94.150.36.10025: FP
2896:3667(771) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>

I do not ignore output btw, since I was just adding a rule to my iptables
rules when I realized I already had something to cover it at the end of my
iptables rules.

iptables -A OUTPUT      -o $EXT_INT -m state --state NEW,ESTABLISHED,RELATED
-j ACCEPT 

The one thing I have not yet tried is fwmarks which I am currently looking
into.

___________________________________________________
Dan Brown
danb@xxxxxx



<Prev in Thread] Current Thread [Next in Thread>