Yes, but I thought these helper modules should been always loaded when
you have DNAT ftp rules.

Anyway, now it works :)

Gabriel.

On Mon, 2010-04-19 at 06:45 -0700, Tom Eastep wrote:
> Gabriel Gonzalez Cano wrote:
> 
> > If I capture with tcpdump at ftp server and firewall interfaces, I see
> > incorrect checksum entries when a net ftp client try to do a data
> > transfer in active mode.
> 
> That's not anything that Shorewall is involved in.
> 
> >  
> > Finally I've found that if I unload nf_nat_ftp and nf_conntrack_ftp
> > modules, active ftp mode works fine (but not passive). 
> > 
> 
> Which is as expected.
> 
> -Tom
> -- 
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
> 
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
> 


-- 
Aquest missatge ha estat analitzat per MailScanner
a la cerca de virus i d'altres continguts perillosos,
i es considera que està net.


------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to