ip_nat_ftp and different ports

ip_nat_ftp and different ports

[Taco IJsselmuiden]

Hi,

I'm having trouble masquerading ftp-ports other than 20/21.
For some service i'm using, i need to masquerade port 42,43,62,63 for FTP
(I know it's weird...).
Now, when using 2.2.x kernels i could use
'insmod ip_masq_ftp ports=21,41,42,62,63'
but using 2.4.0-testx the 'ports=' parameter doesn't seem to work for
ip_nat_ftp.
Is there any other param I should use (couldn't find it in the docs ;(( )

Please cc me because i'm not on the list (only reading the
web-archives....)

Thanks,
Taco.
---
"I was only 75 years old when I met her and I was still a kid...."
          -- Duncan McLeod

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: ip_nat_ftp and different ports

[Martin Josefsson]

On Sun, 3 Dec 2000, Taco IJsselmuiden wrote:

> Hi,
> 
> I'm having trouble masquerading ftp-ports other than 20/21.
> For some service i'm using, i need to masquerade port 42,43,62,63 for FTP
> (I know it's weird...).
> Now, when using 2.2.x kernels i could use
> 'insmod ip_masq_ftp ports=21,41,42,62,63'
> but using 2.4.0-testx the 'ports=' parameter doesn't seem to work for
> ip_nat_ftp.
> Is there any other param I should use (couldn't find it in the docs ;(( )

There is a ftp-multi patch that you can apply to get this working

download iptables-1.2 and run 'make patch-o-matic' and apply the ftp-multi
patch and recompile the ftp module... you're done.

/Martin

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: ip_nat_ftp and different ports

[Taco IJsselmuiden]

On Sun, 3 Dec 2000, Martin Josefsson wrote:

> On Sun, 3 Dec 2000, Taco IJsselmuiden wrote:
> 
> > Hi,
> > 
> > I'm having trouble masquerading ftp-ports other than 20/21.
> > For some service i'm using, i need to masquerade port 42,43,62,63 for FTP
> > (I know it's weird...).
> > Now, when using 2.2.x kernels i could use
> > 'insmod ip_masq_ftp ports=21,41,42,62,63'
> > but using 2.4.0-testx the 'ports=' parameter doesn't seem to work for
> > ip_nat_ftp.
> > Is there any other param I should use (couldn't find it in the docs ;(( )
> 
> There is a ftp-multi patch that you can apply to get this working
> 
> download iptables-1.2 and run 'make patch-o-matic' and apply the ftp-multi
> patch and recompile the ftp module... you're done.
hmm... iptables-1.2 ?
I can only find iptables-1.1.2 (netfilter.filewatcher.org,
netfilter.kernelnotes.org)...
Where could I find 1.2 then ??

I'm running 1.1.2 right now, actually, which should have the 'ftp-multi
patch for non-standard ftp servers'...

Greetz,
Taco.
---
"I was only 75 years old when I met her and I was still a kid...."
          -- Duncan McLeod

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: ip_nat_ftp and different ports

[Martin Josefsson]

On Mon, 4 Dec 2000, Taco IJsselmuiden wrote:

> On Sun, 3 Dec 2000, Martin Josefsson wrote:
> 
> > On Sun, 3 Dec 2000, Taco IJsselmuiden wrote:
> > 
> > > Hi,
> > > 
> > > I'm having trouble masquerading ftp-ports other than 20/21.
> > > For some service i'm using, i need to masquerade port 42,43,62,63 for FTP
> > > (I know it's weird...).
> > > Now, when using 2.2.x kernels i could use
> > > 'insmod ip_masq_ftp ports=21,41,42,62,63'
> > > but using 2.4.0-testx the 'ports=' parameter doesn't seem to work for
> > > ip_nat_ftp.
> > > Is there any other param I should use (couldn't find it in the docs ;(( )
> > 
> > There is a ftp-multi patch that you can apply to get this working
> > 
> > download iptables-1.2 and run 'make patch-o-matic' and apply the ftp-multi
> > patch and recompile the ftp module... you're done.
> hmm... iptables-1.2 ?
> I can only find iptables-1.1.2 (netfilter.filewatcher.org,
> netfilter.kernelnotes.org)...
> Where could I find 1.2 then ??

Ouch, I was typing a little too fast there... it should be 1.1.2

> I'm running 1.1.2 right now, actually, which should have the 'ftp-multi
> patch for non-standard ftp servers'...

Well have you applied the ftp-multi patch? (this is a patch so that the
ftp-module takes a ports parameter, the thing you probably are talking
about is a bug which I and several others found in the ftp-module, these
two things have nothing with each other to do.) 

/Martin

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: ip_nat_ftp and different ports

[Taco IJsselmuiden]

> > I'm running 1.1.2 right now, actually, which should have the 'ftp-multi
> > patch for non-standard ftp servers'...
> 
> Well have you applied the ftp-multi patch? (this is a patch so that the
> ftp-module takes a ports parameter, the thing you probably are talking
> about is a bug which I and several others found in the ftp-module, these
> two things have nothing with each other to do.) 

Well, after having no time for a coule of days, back to business ;))
I've downloaded + applied the ftp-multi patch and recompiled the modules.
then loaded them with ports=21,41,42,62,63, which works (well, no
errors/warnings...).
Then trying the application for which i needed it: doesn't work ;((

Are there maybe some major/crucial differences between the 2.2.x version
(which works) of ip_masq_ftp and the 2.4.x version of ip_nat_ftp ??

Cheers,
Taco.
---
"I was only 75 years old when I met her and I was still a kid...."
          -- Duncan McLeod

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

Re: ip_nat_ftp and different ports (Solved)

[Taco IJsselmuiden]

> Well, after having no time for a coule of days, back to business ;))
> I've downloaded + applied the ftp-multi patch and recompiled the modules.
> then loaded them with ports=21,41,42,62,63, which works (well, no
> errors/warnings...).
> Then trying the application for which i needed it: doesn't work ;((
> 
> Are there maybe some major/crucial differences between the 2.2.x version
> (which works) of ip_masq_ftp and the 2.4.x version of ip_nat_ftp ??
OK, stupid me forgot to use 'modprobe ip_conntrack_ftp ports=41,42,62,63'
in addition to ip_nat_ftp module ...

Everything works perfectly now, and I can keep running 2.4 ;))

Cheers,
Taco.
---
"I was only 75 years old when I met her and I was still a kid...."
          -- Duncan McLeod

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/