Clarify FTP conntrack issue

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3391 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-27 19:51:07 +00:00
parent 93bbd922a3
commit f174f081d0

View File

@ -15,7 +15,7 @@
</author>
</authorgroup>
<pubdate>2005-08-31</pubdate>
<pubdate>2006-01-27</pubdate>
<copyright>
<year>2003</year>
@ -24,6 +24,8 @@
<year>2005</year>
<year>2006</year>
<holder>Thomas M. Eastep</holder>
</copyright>
@ -347,9 +349,9 @@ FTP/ACCEPT dmz net</programlisting>
</example></para>
<para>Note that the FTP connection tracking in the kernel cannot handle
cases where a PORT command (or PASV reply) is broken across two packets.
When such cases occur, you will see a console message similar to this
one:</para>
cases where a PORT command (or PASV reply) is broken across two packets or
is misssing the ending &lt;cr&gt;/&lt;lf&gt;. When such cases occur, you
will see a console message similar to this one:</para>
<programlisting>Apr 28 23:55:09 gateway kernel: conntrack_ftp: partial PORT 715014972+1</programlisting>