Ubuntu
shorewall package

Modules “ip_conntrack_ftp” and “ip_nat_ftp” are not loaded

Bug #104938 reported by Emonib
4
Affects Status Importance Assigned to Milestone
shorewall (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: shorewall

Before version 2.6.20 of kernel, all works great...

With the version 2.6.20, modules “ip_conntrack_ftp” and “ip_nat_ftp” are not loaded automatically.
So people cannot connect to my ftp server.

I think the problem is linked with new name for kernel module in version 2.6.20.
I need to do these changes in /etc/shorewall/modules to make connection traking to work :
---------------------------------
# loadmodule ip_tables
# loadmodule iptable_filter
# loadmodule ip_conntrack
# loadmodule ip_conntrack_ftp
# loadmodule ip_conntrack_irc
# loadmodule iptable_nat
# loadmodule ip_nat_ftp
# loadmodule ip_nat_irc

    modprobe ip_tables
    modprobe iptable_filter
    modprobe ip_conntrack
    modprobe ip_conntrack_ftp
    modprobe ip_conntrack_irc
    modprobe iptable_nat
    modprobe ip_nat_ftp
    modprobe ip_nat_irc
---------------------------------

Other informations are available if needed...

Revision history for this message
Emonib (emonib) wrote :

Bug confirmed here :
http://<email address hidden>/msg01399.html

Revision history for this message
julioromano (romanomarco) wrote :

As you can see from: http://www.shorewall.net/News.htm

Starting from version 3.2.10 shorewall includes some knowledge of the new nf_conntrack modules included with 2.6.20 kernels.
I suggest the .deb package should be updated to version 3.2.10.

Regards,
Marco

Daniel T Chen (crimsun)
Changed in shorewall:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.