How to NAT The FTP-DATA Connection?

[Joseph Mack NA3T]

On Wed, 27 Dec 2006, Horms wrote:

> I just skimmed through the code, and it seems to listen for both the
> PASV and PORT command. My FTP knowledge is a bit rusty, but I think the
> latter is for non-passive ftp, so yes it seems to be needed for both.

In LVS-DR (and LVS-Tun) when persistence is used (rather 
than the LVS-NAT ftp helper) to link the ftp and ftp-data 
ports, I would now assume that the ftp-data packets are 
RIP->CIP. Presumably the return packets from the client are 
CIP->VIP. Only ever having done this with a bench setup all 
on private IPs, it now occurs to me that LVS-DR in a 
production ftp server setup, is sending all its ftp-data 
packets from the RIP.

Got any idea if this is right?

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!