Page 1 of 1

Problem with marking FTP traffic (mark routing)

Posted: Wed Dec 05, 2007 11:23 am
by jalokim
Hi,

I don't know why, but when I try to makr FTP traffic only "thing" which I recive are few kb/s when the real traffic is >300kb/s
I tried with 20-21 port and connection-type=ftp:

4 chain=prerouting action=mark-routing new-routing-mark=GTSftp
passthrough=yes src-address=192.168.0.0/24 connection-type=ftp

I would like to pass FTP traffic to other ISP so all trafic has to be marked.

Is only solution is to install 3.0 and l7 ?

MJ

Re: Problem with marking FTP traffic (mark routing)

Posted: Wed Dec 05, 2007 11:39 am
by nowires
Is only solution is to install 3.0 and l7 ?
MJ
I think that L7 in the only way.

FTP also uses random ports between 1024 and 5000, so if you want to route/mangle all FTP traffic, you need L7.

Re: Problem with marking FTP traffic (mark routing)

Posted: Wed Dec 05, 2007 11:43 am
by jalokim
I think that L7 in the only way.

FTP also uses random ports between 1024 and 5000, so if you want to route/mangle all FTP traffic, you need L7.
Yes, I know, that FTP randoms port when not working in passive mode, but my question is - what for is connection-type=ftp if it is not working properly ?

MJ

Re: Problem with marking FTP traffic (mark routing)

Posted: Wed Dec 05, 2007 2:10 pm
by Chupaka
4 chain=prerouting action=mark-routing new-routing-mark=GTSftp
passthrough=yes src-address=192.168.0.0/24 connection-type=ftp
this is upload traffic. in the same time, download could easily be > 300 kb/s =)

Re: Problem with marking FTP traffic (mark routing)

Posted: Wed Dec 05, 2007 3:35 pm
by jalokim
4 chain=prerouting action=mark-routing new-routing-mark=GTSftp
passthrough=yes src-address=192.168.0.0/24 connection-type=ftp
this is upload traffic. in the same time, download could easily be > 300 kb/s =)
chupaka you re right! i didn't notice that ;)

now it is "working" but only in half ;) i can log to ftp server, but cennot do ls (via routing mark) - i works only in passive mode (but when i swich to passive marking is not working :/)