Re: FTP Masquerading - unable to finish ftp transfer

David L. Parsley (kparse@salem.k12.va.us)
Sat, 23 Oct 1999 03:23:52 -0400 (EDT)


Hello,
I had this problem as well; what's happening is the ftp control
connection masq entry is timing out during the long data transfer. man
ipchains has the info on increasing your timeout values.

cheers,
David

On Sun, 17 Oct 1999, Rok Papez wrote:

> Hi!
>
> I have a Linux server. The server has a modem it connects my private
> LAN (192.168.1.x) to the internet thru IpMasquerading.
>
> I have recently upgraded the server from RedHat 5.2 (2.0.36 kernel)
> to RedHat 6.0 (2.2.12 kernel). From upgrade on I experiance a problem that
> *seems* to be related to masquerading.
>
> I open a few ftp connection to *one* ftp server. If files are small there is no
> problem, but with larger files at one moment one of the transfers never
> finishes (Netscape - same is with NcFTP - keeps it stuck at 100% and it never
> finishes). After one tansfer never finishes, *no* transfer finishes.
> If I stop all transfers and reconnect later, everything is OK, until another
> transfers hangs at 100%.
>
> I didn't have this kind of problems with 2.0.36 kernel.
>
> Here is my setup:
> - kernel 2.2.12
> - [/root]# rpm -qa | grep ipchains
> ipchains-1.3.8-3
> - [/root]# cat /etc/rc.d/rc.masq
> #!/bin/sh
> echo "Setting up masquerading."
> /sbin/modprobe ip_masq_ftp
> /sbin/modprobe ip_masq_irc
> /sbin/modprobe ip_masq_quake
> /sbin/modprobe ip_masq_raudio
> /sbin/modprobe ip_masq_cuseeme
> /sbin/modprobe ip_masq_vdolive
> /sbin/modprobe ip_masq_user.o
> # Reset the rules!
> /sbin/ipchains -F
> /sbin/ipchains -P input ACCEPT
> /sbin/ipchains -P output ACCEPT
> /sbin/ipchains -P forward ACCEPT
> /sbin/ipchains -P forward REJECT
> /sbin/ipchains -A forward -s 192.168.1.0/255.255.255.0 -j MASQ
>
> Please CC me at rok.papez@kiss.uni-lj.si
>
> --
> best regards,
> Rok Papez.
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
> Please read the FAQ at http://www.tux.org/lkml/
>

- --
David L. Parsley
Network Specialist
City of Salem Schools

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/