ftp_conntrack and encrypted FTP
Hello Guys,
I'm having some troubles with encrypted FTP connections. As i could
imagine, conntrack_ftp and nat_ftp are not being able of recognizing the correct ports to open because the connection is encrypted and the PASV information is not seen by the modules.
I dont think so ..... but is there any way of working around this ??
Signature · 8 lines
Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email [email protected] My SPAMTRAP, do not email it
Quoted 8 lines · Leonardo Rodrigues Magalhães
Hello Guys,
I'm having some troubles with encrypted FTP connections. As i could
imagine,conntrack_ftpandnat_ftpare not being able of recognizing the correct ports to open because the connection is encrypted and the PASV information is not seen by the modules.I dont think so ..... but is there any way of working around this ??
Use unencrypted ftp (which is insecure and not recommended) or forget conntrack for this because encrypted channels cannot be on the fly decrypted without the keys used for encryption.
Signature · 1 line
Attila
Quoted 8 lines · Leonardo Rodrigues Magalhães
Hello Guys,
I'm having some troubles with encrypted FTP connections. As i could
imagine,conntrack_ftpandnat_ftpare not being able of recognizing the correct ports to open because the connection is encrypted and the PASV information is not seen by the modules.I dont think so ..... but is there any way of working around this ??
Use scp instead.
HTH
M4
В Птн, 09/11/2007 в 14:09 +0100, Martijn Lievaart пишет:
Quoted 9 lines
Quoted 8 lines · Leonardo Rodrigues Magalhães
Hello Guys,
I'm having some troubles with encrypted FTP connections. As i could
imagine,conntrack_ftpandnat_ftpare not being able of recognizing the correct ports to open because the connection is encrypted and the PASV information is not seen by the modules.
Quoted 4 lines
Quoted 2 lines
I dont think so ..... but is there any way of working around this ??
Use scp instead.
FTP dies.
Signature · 1 line
Покотиленко Костик <[email protected]>