How to NAT The FTP-DATA Connection?

Robinson, Eric eric.robinson at pmcipa.com
Fri Dec 22 16:15:26 GMT 2006


>load the ftp helper module. I thought it was loaded automatically 
>when you ran ipvsadm with ftp as a virtual service.

The following shows that the ftp helper module (ip_vs_ftp) is in fact
loaded.

[root at lb1 ~]# modprobe -l|grep ftp
/lib/modules/2.6.17.11/kernel/net/ipv4/ipvs/ip_vs_ftp.ko
/lib/modules/2.6.17.11/kernel/net/ipv4/netfilter/ip_conntrack_tftp.ko
/lib/modules/2.6.17.11/kernel/net/ipv4/netfilter/ip_conntrack_ftp.ko

So why would it not be working? Network traces on the client machines
show the FTP-DATA connection is not being NATed.

Here's the output from ipvsadm if it helps:

[root at lb1 ~]# ipvsadm
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  extrovert.mycharts.md:ftp wlc
  -> appftp2(FQDN censored):ftp      Masq    1      0          0
  -> appftp1(FQDN censored):ftp      Masq    1      0          0




Disclaimer - December 22, 2006 
This email and any files transmitted with it are confidential and intended solely for LinuxVirtualServer.org users mailing list.. If you are not the named addressee you should not disseminate, distribute, copy or alter this email. Any views or opinions presented in this email are solely those of the author and might not represent those of Physician Select Management (PSM) or Physician's Managed Care (PMC). Warning: Although the message sender has taken reasonable precautions to ensure no viruses are present in this email, neither PSM nor PMC can accept responsibility for any loss or damage arising from the use of this email or attachments.

Search lvs-users Archives
Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort

More information about the lvs-users mailing list