ipvs: add ipv6 support to ftp

Browse source

Add support for FTP commands with extended format (RFC 2428):

- FTP EPRT: IPv4 and IPv6, active mode, similar to PORT
- FTP EPSV: IPv4 and IPv6, passive mode, similar to PASV.
EPSV response usually contains only port but we allow real
server to provide different address

We restrict control and data connection to be from same
address family.

Allow the "(" and ")" to be optional in PASV response.

Also, add ipvsh argument to the pkt_in/pkt_out handlers to better
access the payload after transport header.

Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Julian Anastasov 2018-05-25 22:06:25 +03:00 • committed by Pablo Neira Ayuso

parent 0cfceb9ff9

commit d12e12299a

6 changed files with 331 additions and 182 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

10

include/net/ip_vs.h

View file

24

net/netfilter/ipvs/ip_vs_app.c

View file

481

net/netfilter/ipvs/ip_vs_ftp.c

View file

4

net/netfilter/ipvs/ip_vs_proto_sctp.c

View file

4

net/netfilter/ipvs/ip_vs_proto_tcp.c

View file

4

net/netfilter/ipvs/ip_vs_proto_udp.c

View file