[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: how to control the ftp-data traffic



If you have ip_conntrack_ftp, you can use this:
"iptables -t mangle -A FORWARD -m helper --helper ftp -j MARK --set-mark "
With this, all packets RELATED to a ftp-session will be marked, this
includes to passive ftp-session.
Greetings.


On 9/17/05, LeVA <leva@az.isten.hu> wrote:
> Hi!
> 
> Does anyone have an idea how to limit the ftp server's bandwidth? I can mark
> the packets from/to the port 21, but the data connection (passive) uses
> another and random port. How would I know which port will be the data
> connection port?
> 
> Thanks!
> 
> Daniel
> 
> --
> LeVA
> 
> 
> --
> To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
>



Reply to: