Gabriel Gonzalez Cano wrote: > If I capture with tcpdump at ftp server and firewall interfaces, I see > incorrect checksum entries when a net ftp client try to do a data > transfer in active mode.
That's not anything that Shorewall is involved in. > > Finally I've found that if I unload nf_nat_ftp and nf_conntrack_ftp > modules, active ftp mode works fine (but not passive). > Which is as expected. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
