From 253e4dc0683b3e9969a2254bfdcf8d699039ff0e Mon Sep 17 00:00:00 2001 From: David Marchand Date: Tue, 15 Jan 2019 18:58:15 -0800 Subject: conntrack: fix tcp seq adjustments when mangling commands. The ftp alg deals with packets in two ways for the command connection: either they are inspected and can be mangled when nat is enabled (CT_FTP_CTL_INTEREST) or they just go through without being modified (CT_FTP_CTL_OTHER). For CT_FTP_CTL_INTEREST packets, we must both adjust the packet tcp seq number by the connection current offset, then prepare for the next packets by setting an accumulated offset in the ct object. However, this was not done for multiple CT_FTP_CTL_INTEREST packets for the same connection. This is relevant for handling multiple child data connections that also need natting. The tests are updated so that some ftp+NAT tests send multiple port commands or other similar commands for a single control connection. Wget is not able to do this, so switch to lftp. Fixes: bd5e81a0e596 ("Userspace Datapath: Add ALG infra and FTP.") Co-authored-by: Darrell Ball Signed-off-by: Darrell Ball Signed-off-by: David Marchand Signed-off-by: Ben Pfaff --- Vagrantfile-FreeBSD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'Vagrantfile-FreeBSD') diff --git a/Vagrantfile-FreeBSD b/Vagrantfile-FreeBSD index 8f00abe8d..52599eefa 100644 --- a/Vagrantfile-FreeBSD +++ b/Vagrantfile-FreeBSD @@ -12,7 +12,7 @@ Vagrant.require_version ">=1.7.0" $bootstrap_freebsd = <