Skip to contentSkip to conversation

ip_conntrack_ftp and non-standard ports

DISCUSSION Brian Capouch 3 participants 4 messages Mar 30, 2006 – Apr 1, 2006

lore
Share & tools
lore
#0 lore raw

I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.

I hope someone might provide a pointer.

Thanks.

B.

#1 lore raw
Quoted 4 lines · Brian Capouch

I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.

This is done when loading the ip_conntrack_ftp and ip_nat_ftp kernel modules, eg.

modprobe ip_conntracl_ftp ports=21,2021,3021
modprobe ip_nat_ftp ports=21,2021,3021

(see "modinfo ip_conntrack_ftp")

Quoted 2 lines

I hope someone might provide a pointer.

Hope this helps...

Regards,
Filip

#2 lore raw

I was also told to edit the source of module.

Quoted 21 lines · Filip Sneppe
Quoted 4 lines · Brian Capouch

I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.

This is done when loading the ip_conntrack_ftp and ip_nat_ftp kernel modules, eg.

modprobe ip_conntracl_ftp ports=21,2021,3021
modprobe ip_nat_ftp ports=21,2021,3021

(see "modinfo ip_conntrack_ftp")

Quoted 2 lines

I hope someone might provide a pointer.

Hope this helps...

Regards,
Filip

#3 lore raw
Quoted 2 lines · ludi

I was also told to edit the source of module.

No that's not needed (not for any of the conntrack/nat modules I know of).

Regards,
Filip