linux-sg2042/net/netfilter/ipvs
Julian Anastasov 6523ce1525 ipvs: fix active FTP
- Do not create expectation when forwarding the PORT
  command to avoid blocking the connection. The problem is that
  nf_conntrack_ftp.c:help() tries to create the same expectation later in
  POST_ROUTING and drops the packet with "dropping packet" message after
  failure in nf_ct_expect_related.

- Change ip_vs_update_conntrack to alter the conntrack
  for related connections from real server. If we do not alter the reply in
  this direction the next packet from client sent to vport 20 comes as NEW
  connection. We alter it but may be some collision happens for both
  conntracks and the second conntrack gets destroyed immediately. The
  connection stucks too.

Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-09-08 10:39:57 -07:00
..
Kconfig ipvs: remove EXPERIMENTAL tag 2010-08-02 17:08:11 +02:00
Makefile ipvs: SCTP Trasport Loadbalancing Support 2010-02-18 12:31:05 +01:00
ip_vs_app.c IPVS: make FTP work with full NAT support 2010-07-23 12:48:52 +02:00
ip_vs_conn.c ipvs: provide default ip_vs_conn_{in,out}_get_proto 2010-08-02 17:12:44 +02:00
ip_vs_core.c ipvs: fix active FTP 2010-09-08 10:39:57 -07:00
ip_vs_ctl.c IPVS: one-packet scheduling 2010-06-22 08:07:01 +02:00
ip_vs_dh.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
ip_vs_est.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
ip_vs_ftp.c ipvs: fix active FTP 2010-09-08 10:39:57 -07:00
ip_vs_lblc.c fix typos concerning "initiali[zs]e" 2010-06-16 18:05:05 +02:00
ip_vs_lblcr.c fix typos concerning "initiali[zs]e" 2010-06-16 18:05:05 +02:00
ip_vs_lc.c IPVS: use pr_err and friends instead of IP_VS_ERR and friends 2009-08-02 18:29:30 -07:00
ip_vs_nq.c IPVS: use pr_err and friends instead of IP_VS_ERR and friends 2009-08-02 18:29:30 -07:00
ip_vs_proto.c netfilter: xt_ipvs (netfilter matcher for IPVS) 2010-07-23 12:42:58 +02:00
ip_vs_proto_ah_esp.c IPVS: fix potential stack overflow with overly long protocol names 2010-04-08 13:35:47 +02:00
ip_vs_proto_sctp.c ipvs: provide default ip_vs_conn_{in,out}_get_proto 2010-08-02 17:12:44 +02:00
ip_vs_proto_tcp.c ipvs: provide default ip_vs_conn_{in,out}_get_proto 2010-08-02 17:12:44 +02:00
ip_vs_proto_udp.c ipvs: provide default ip_vs_conn_{in,out}_get_proto 2010-08-02 17:12:44 +02:00
ip_vs_rr.c IPVS: use pr_err and friends instead of IP_VS_ERR and friends 2009-08-02 18:29:30 -07:00
ip_vs_sched.c IPVS: use pr_err and friends instead of IP_VS_ERR and friends 2009-08-02 18:29:30 -07:00
ip_vs_sed.c IPVS: use pr_err and friends instead of IP_VS_ERR and friends 2009-08-02 18:29:30 -07:00
ip_vs_sh.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
ip_vs_sync.c net: sk_sleep() helper 2010-04-20 16:37:13 -07:00
ip_vs_wlc.c IPVS: use pr_fmt 2009-07-30 14:29:44 -07:00
ip_vs_wrr.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
ip_vs_xmit.c ipvs: fix active FTP 2010-09-08 10:39:57 -07:00