Hannes Eder 7f1c407579 IPVS: make FTP work with full NAT support
Use nf_conntrack/nf_nat code to do the packet mangling and the TCP
sequence adjusting.  The function 'ip_vs_skb_replace' is now dead
code, so it is removed.

To SNAT FTP, use something like:

% iptables -t nat -A POSTROUTING -m ipvs --vaddr 192.168.100.30/32 \
    --vport 21 -j SNAT --to-source 192.168.10.10
and for the data connections in passive mode:

% iptables -t nat -A POSTROUTING -m ipvs --vaddr 192.168.100.30/32 \
    --vportctl 21 -j SNAT --to-source 192.168.10.10
using '-m state --state RELATED' would also works.

Make sure the kernel modules ip_vs_ftp, nf_conntrack_ftp, and
nf_nat_ftp are loaded.

[ up-port and minor fixes by Simon Horman <horms@verge.net.au> ]
Signed-off-by: Hannes Eder <heder@google.com>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-07-23 12:48:52 +02:00
..
2010-05-21 16:44:34 -05:00
2010-06-03 03:21:52 -07:00
2010-05-12 23:02:23 -07:00
2009-11-04 05:06:25 -08:00
2009-09-01 17:40:57 -07:00
2010-06-03 03:21:52 -07:00
2010-06-03 03:21:52 -07:00
2009-03-21 19:06:54 -07:00
2009-09-01 17:40:31 -07:00
2009-11-04 05:06:25 -08:00
2010-06-02 05:16:23 -07:00
2010-04-13 01:41:33 -07:00
2010-06-03 03:21:52 -07:00
2010-06-30 13:31:19 -07:00
2010-06-10 23:31:35 -07:00
2010-06-30 13:31:19 -07:00
2010-06-03 03:21:52 -07:00
2009-12-26 20:46:28 -08:00
2010-06-03 03:21:52 -07:00
2010-06-03 03:21:52 -07:00
2010-06-30 12:06:52 -07:00
2010-03-12 15:52:40 -08:00
2009-01-06 11:38:15 -07:00
2010-06-23 12:58:40 -07:00
2009-11-20 15:35:04 -08:00
2009-03-21 19:06:50 -07:00
2010-04-13 14:49:34 -07:00
2009-11-04 05:06:25 -08:00
2009-07-26 19:11:14 -07:00
2010-06-10 23:31:35 -07:00
2010-06-30 13:31:19 -07:00
2010-06-26 22:00:03 -07:00
2009-11-10 20:54:38 -08:00
2009-10-07 16:39:43 -04:00