Hi All,
Here is the solution we found in iptables:
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -p tcp --sport 20 -m state --state ESTABLISHED,RELATED -j
ACCEPT
modprobe ip_nat_ftp ports=21
After installing this the ftp worked.
Hope this helps.
Brgds,
Joseph Mack wrote:
>
> On Wed, 9 Jun 2010, Shaheed-SA wrote:
>
>>
>> Thanks Joe
>>
>> We are using a Nat LVS setup, and we are trying to connect to an active
>> FTP
>> server, from the real servers. We can connect to it from the LVS servers,
>> but cannot connect to it from the Real Servers behind the LVS servers.
>
> So if the director doesn't have ip_vs loaded (or the ipvsadm
> table is empty), then you can ftp from the realservers to
> 0/0 through the director, but as soon as you load ip_vs the
> ftp stops working?
>
> Joe
>
> --
> Joseph Mack NA3T EME(B,D), FM05lw North Carolina
> jmack (at) wm7d (dot) net - azimuthal equidistant map
> generator at http://www.wm7d.net/azproj.shtml
> Homepage http://www.austintek.com/ It's GNU/Linux!
>
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>
>
--
View this message in context:
http://old.nabble.com/LVS-and-FTP-Connection-issue-from-real-servers-tp28830137p28876416.html
Sent from the LVS mailing list archive at Nabble.com.
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|