Problems mangling FTP traffic

I would like to down prioritize the FTP traffic on my network, but is facing difficulties mangling the traffic as FTP passive mode seems to use all kinds of different ports and some server are set up for communication in other ports than 20/21.

Are there a good way to identify the FTP traffic?

rgs Pilgrim

Hi Pilgrim!

Just saw the answer in another post, if you have not found the answer yourself.
In mangle, connection/packet-mark or routing-mark with “connection-state=related connection-type=ftp” also.

Thanks a lot SurferTim, working perectly now :slight_smile:

rgs Pilgrim

hi pilgrim can you post your sample FTP mangle config

thanks

This is what i put in. I later found out that it only work in some case. I am not sure about the reason. So I would be very interested in hearing about your experience too.

rgs Pilgrim

Mangle:

add action=mark-connection chain=prerouting comment=“” connection-state=related connection-type=ftp disabled=no
new-connection-mark=ftp-conn passthrough=yes
add action=mark-packet chain=prerouting comment=“” connection-mark=ftp-conn disabled=no new-packet-mark=low-priority
passthrough=no