[Proftpd-user] ProFTPD server sending PORT for passive on different IP address than contacted
Tony Stocker <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CACLi31VdoDzprmFiTmUbTwGHH=nyeL_6ns+58rZtYe=1Orxw8A@mail.gmail.com> |
So we have a server with multiple IP addresses, but the same structure when accessed, so there's been no reason to use VirtualHost definitions for the different IP addresses. Our setup looks like this: DefaultAddress 198.x.y.100 198.x.y.103 2001:4d0:x:y::64 2001:4d0:x:y::67 ... PassivePorts 64000 65000 When a client contacts the server via the 198.x.y.103 address, provides user name and password, then changes directory, the server sets a passive port but uses the IP address of 198.x.y.100. The client then can't connect because their firewall doesn't see it as a related connection because they're using FTPS and thus the firewall can't do SPI of the contents of the port negotiation. How can I force Proftpd to only respond and provide ports for the IP address on which it was contacted and not just the first one in its DefaultAddress setting? _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html