Community discussions

MikroTik App
 
binary
newbie
Topic Author
Posts: 26
Joined: Mon Aug 23, 2004 2:42 pm
Location: Istanbul / Turkey
Contact:

Qos & FTP Pasv

Sun Dec 19, 2004 5:01 pm

I am trying to implement Qos. I had specifed must services by their port numbers.

But I am having problem on ftp pasv connection, because of they dont use std tcp 20-21.

How can I solve this problem?
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Mon Dec 20, 2004 12:54 pm

I was wondering the same, because pasvFTP uses dynamic ports.
 
wjw
Frequent Visitor
Frequent Visitor
Posts: 91
Joined: Thu Jun 10, 2004 12:59 am
Location: New Zealand
Contact:

Tue Dec 21, 2004 10:26 am

There must be a way. You'd would need to capture the initial connection which goes:

Client Dynamic Port - Port 21 of FTP Server

Then you would need to apply your QOS rules on the data connection which runs on the 'Client's Dynamic Port' + 1 to a random port on the server.

It may be possible using the connection mark method, but I'm not sure how you could group the the two 'connections' together.
 
wjw
Frequent Visitor
Frequent Visitor
Posts: 91
Joined: Thu Jun 10, 2004 12:59 am
Location: New Zealand
Contact:

Tue Dec 21, 2004 10:35 am

Hmm Linux has two specific modules to do this:

ip_conntrack_ftp
ip_nat_ftp
 
User avatar
Eugene
Forum Veteran
Forum Veteran
Posts: 993
Joined: Mon May 31, 2004 5:06 pm
Location: Cranfield, UK

Tue Dec 21, 2004 6:32 pm

From v2.9 mangle manual:
connection-type (ftp | gre | h323 | irc | mms | pptp | quake3 | tftp) - match packets with given connection type

Don't know, though, whether it'll catch passive ftp.

Eugene
Tout individu a droit à la vie, à la liberté et à la sûreté de sa personne.

Who is online

Users browsing this forum: Baidu [Spider], mmzandu, tiago15, Zakara2020 and 90 guests