linux-kernel - Regression between 4.6.2 and 4.8.17: ftp and iptables

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <30868c4c-d042-e5c9-76e7-0957e8f9c1fa@proteger.at>
Date:   Thu, 9 Mar 2017 08:25:44 +0100
From:   Michael Monnerie <michael@...teger.at>
To:     linux-kernel@...r.kernel.org
Subject: Regression between 4.6.2 and 4.8.17: ftp and iptables

We have a server with vsftpd-2.0.7-4.35.1 on SUSE SLES 11.3 and use 
iptables local firewall
With kernel 4.6.2 it runs normal, when using 4.8.17, ftp doesn’t work 
anymore. It seems iptables doesn’t open the port for the passive ftp 
connection from the client.

The options for the kernel should be the same, although a diff between 
the two configs spits a lot of lines.
I don’t find any mistake from our side, so I guess there was a change in 
the kernel?

Please ask me directly in case of questions, I’m not on linux-kernel.

mit freundlichen Grüssen,
Michael Monnerie

Download attachment "vmlinuz-kernel-config.zip" of type "application/x-zip-compressed" (38961 bytes)