[Proftpd-user] ProFTPD server sending PORT for passive on different IP address than contacted

Tony Stocker <[email protected]>
Newsgroups gmane.network.proftpd.user
Message-ID <CACLi31VdoDzprmFiTmUbTwGHH=nyeL_6ns+58rZtYe=1Orxw8A@mail.gmail.com>
So we have a server with multiple IP addresses, but the same structure
when accessed, so there's been no reason to use VirtualHost
definitions for the different IP addresses. Our setup looks like this:

DefaultAddress 198.x.y.100 198.x.y.103 2001:4d0:x:y::64 2001:4d0:x:y::67
...
PassivePorts 64000 65000


When a client contacts the server via the 198.x.y.103 address,
provides user name and password, then changes directory, the server
sets a passive port but uses the IP address of 198.x.y.100. The client
then can't connect because their firewall doesn't see it as a related
connection because they're using FTPS and thus the firewall can't do
SPI of the contents of the port negotiation.

How can I force Proftpd to only respond and provide ports for the IP
address on which it was contacted and not just the first one in its
DefaultAddress setting?


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.