Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1273 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FTP Problem

jauer
Hi,

we are running a published FTP server.
All worked pretty well until some days ago, one of our customers can't download any file. Download gets abortet every time he tries.

So I searched the FW-Log and found this:
2012:04:24-12:09:27 ***XX-1 ulogd[5793]: id="2000" severity="info" sys="SecureNet" sub="packetfilter" name="Packet logged" action="log" mark="0xa2" app="162" srcip="" dstip="" proto="6" length="89" tos="0x00" prec="0x00" ttl="127" srcport="21" dstport="54237" tcpflags="ACK PSH" info="nf_conntrack_ftp: invalid IP address, resetting connection "
2012:04:24-12:09:27 ***XX-1 ulogd[5793]: id="2000" severity="info" sys="SecureNet" sub="packetfilter" name="Packet logged" action="log" outitf="eth1" mark="0xa2" app="162" srcmac="0:1a:8c:f0:5:1" srcip="" dstip="" proto="6" length="89" tos="0x00" prec="0x00" ttl="127" srcport="21" dstport="54237" tcpflags="ACK PSH" info="nf_ct_ftp: dropping packet"


Any idea what might be the problem?
What does nf_ct_ftp: dropping packet and nf_conntrack_ftp: invalid IP address, resetting connection mean?

Port 20,21,Passive are properly forwarded.
FTP is located in DMZ. Connection, Download and Upload works from internal network.

thanks,
jauer


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to BAlfson
    Thanks for your hint.
    But unfortunately I found nothing in the intrusion log files. Meanwhile I also tried to disable Intrusion Prevention. Had no success.
    What might be a hint is that the client can download only 10880 Bytes before running into timeout.
Children
No Data