Re: [lvs-users] LVS DR passive FTP Problems

To: "' users mailing list.'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LVS DR passive FTP Problems
From: "Dan Brown" <danb@xxxxxx>
Date: Tue, 28 Aug 2007 14:18:44 -0600
On Tuesday, August 28, 2007 Graeme Fowler wrote:
> On Tue, 2007-08-28 at 10:43 -0600, Dan Brown wrote:
> > What am I doing wrong?
> Have you loaded the kernel FTP helper module?
> modprobe -v ip_vs_ftp

Well I had thought that was only for LVS-NAT applications but I tried it
anyways with no apparent luck.  The HOWTO sections on FTP seem to cover 95%
LVS-NAT situations which I see little correspondence to my own

I can dir/ls, get, (and many other commands), but not actually "put" a file
to the ftp service.  When I attempt that I get the following via tcpdump.

13:34:33.452370 IP > .
1448:2896(1448) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>
13:34:33.456580 IP > FP
2896:3667(771) ack 1 win 46 <nop,nop,timestamp 1130729341 1612910975>

I do not ignore output btw, since I was just adding a rule to my iptables
rules when I realized I already had something to cover it at the end of my
iptables rules.

iptables -A OUTPUT      -o $EXT_INT -m state --state NEW,ESTABLISHED,RELATED

The one thing I have not yet tried is fwmarks which I am currently looking

Dan Brown

<Prev in Thread] Current Thread [Next in Thread>