ip_conntrack_ftp and non-standard ports
I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.
I hope someone might provide a pointer.
Thanks.
B.
Quoted 4 lines · Brian Capouch
I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.
This is done when loading the ip_conntrack_ftp and ip_nat_ftp kernel modules, eg.
modprobe ip_conntracl_ftp ports=21,2021,3021
modprobe ip_nat_ftp ports=21,2021,3021
(see "modinfo ip_conntrack_ftp")
Quoted 2 lines
I hope someone might provide a pointer.
Hope this helps...
Regards,
Filip
I was also told to edit the source of module.
Quoted 21 lines · Filip Sneppe
Quoted 4 lines · Brian Capouch
I hope this isn't a FAQ. I've looked around and googled around, and so far, it seems from what I've found that such a thing can be done. What I don't know is just how to tell iptables to do it.
This is done when loading the
ip_conntrack_ftpandip_nat_ftpkernel modules, eg.modprobe
ip_conntracl_ftpports=21,2021,3021
modprobeip_nat_ftpports=21,2021,3021(see "modinfo
ip_conntrack_ftp")Quoted 2 lines
I hope someone might provide a pointer.
Hope this helps...
Regards,
Filip
Quoted 2 lines · ludi
I was also told to edit the source of module.
No that's not needed (not for any of the conntrack/nat modules I know of).
Regards,
Filip