Re: 4.1.31 ip_ftp_pxy.c error

Steve Clark <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <26615_1228741453_493D1B4D_26615_2615_1_493D1B20.9010507@netwolves.com>
Darren Reed wrote:
> Steve,
> 
> I don't know which web server/site you were connecting to
> that produced the problem, but I'm having a stab at fixing it.
> 
> Try the attached patch.
> 
> Darren
> 
> 
> 
<..snip..>

Here is the results - still the same - looks like the junk flag is getting
reset before it should. Now that I understand what you are trying to
do I'll continue to look at the code.

Steve

Dec  8 07:38:18 Z2873 kernel: OUT: 2 seq dc1386ab/0 ack 0/0 len 0/64 off 64
Dec  8 07:38:18 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:18 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:18 Z2873 kernel: rv 0 t:seq[0] 0 seq[1] 0 0/0
Dec  8 07:38:18 Z2873 kernel: ippr_ftp_process:f:seq[0] 0 seq[1] 0
Dec  8 07:38:19 Z2873 kernel: OUT: 10 seq dc1386ac/0 ack 55da10a2/0 len 0/52 off 52
Dec  8 07:38:19 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:19 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:19 Z2873 kernel: rv 0 t:seq[0] 55da10a2 seq[1] 0 0/0
Dec  8 07:38:19 Z2873 kernel: ippr_ftp_process:f:seq[0] dc1386ac seq[1] 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10a2 ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da10a2/0 ack dc1386ac/0 len 7/59 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 7/0 off 59 wptr c265aec7 junk 0 [220-
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=3 len 7 rv 1 ptr c265aec0/c265aec7 buf [220-
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da10a9 inc 0 len 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10a9 ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da10a9/0 ack dc1386ac/0 len 75/127 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 3 [  ****************************
***** WARNING *****************************
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [  ****************************
***** WARNING *****************************
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da10f4 inc 0 len 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da10f4 ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da10f4/0 ack dc1386ac/0 len 63/115 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 63/0 off 115 wptr c265aeff junk 0 [             This system is fo
r use by authorized users only.
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 63 rv 1 ptr c265aec0/c265aeff buf [             This system is fo
r use by authorized users only.
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da1133 inc 0 len 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da1133 ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da1133/0 ack dc1386ac/0 len 75/127 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 0 [  ****************************
*******************************************
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [  ****************************
*******************************************
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da117e inc 0 len 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da117e ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da117e/0 ack dc1386ac/0 len 75/127 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 75/0 off 127 wptr c265af0b junk 0 [  All activities on this syste
m are recorded and may be monitored for the
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=0 len 75 rv 1 ptr c265aec0/c265af0b buf [  All activities on this syste
m are recorded and may be monitored for the
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ftps_seq[1] = 55da11c9 inc 0 len 0
Dec  8 07:38:23 Z2873 kernel: seqoff 0 thseq 55da11c9 ackmin 0
Dec  8 07:38:23 Z2873 kernel: ackoff 0 thack dc1386ac seqmin 0
Dec  8 07:38:23 Z2873 kernel: IN: 18 seq 55da11c9/0 ack dc1386ac/0 len 78/130 off 52
Dec  8 07:38:23 Z2873 kernel: sel 0 seqmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: sel 0 ackmin 0/0 offset 0/0
Dec  8 07:38:23 Z2873 kernel: rv 1 t:seq[0] dc1386ac seq[1] 0 0/0
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:len 78/0 off 130 wptr c265af0e junk 0 [purpose of tracking down intru
ders.  In the course of monitoring individuals
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_server_valid:bad:junk 0 len 78/77 c 0x70 buf [purpose of tracking down intrud
ers.  In the course of monitoring individuals
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_valid=1 len 78 rv 1 ptr c265aec0/c265af0e buf [purpose of tracking down intru
ders.  In the course of monitoring individuals
Dec  8 07:38:23 Z2873 kernel: ]
Dec  8 07:38:23 Z2873 kernel: ippr_ftp_process:cmds == 0 junk == 1
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.