Re: ftp hangs



Rod wrote:
In article <44140402@xxxxxxxxxxxxx>,
"Dave (from the UK)" <see-my-signature@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:


I have an ftp server set up on a Sun Ultra 60. Whilst it functions on the localhost, other machines have problems with it. It connects fine, but then locks up as soon as one tries to do anything with it.

bach /home/duke/drkirkby % ftp 213.78.42.15
Connected to 213.78.42.15.
220 cuckoo2 FTP server ready.
Name (213.78.42.15:drkirkby): ebay
331 Password required for ebay.
Password:
230 User ebay logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
*** IT IS NOW HUNG ***

(feel free to test youself if you want - use password "u60")

It is connected to the internet via an ADSL modem with router and firewall. I strongly suspect the firewall is causing the problem, but what is odd is that I have an ftp server on an HP C3600 running HP-UX 11 too, and that works fine if that is connected instead.

I've disabled the software firewall on the Sun, so it is not a mis-configured ipfilter.

I just can't work out why the HP C3600 box should work fine and the Sun Ultra 60 not.

All outgoing traffic should be allowed by the hardware firewall, and there is nothing indicated in the logs to show any blocked packets.

Any ideas ?


I managed to get a listing back by telling my ftp client to use Passive mode.

Cmd: PASV
227: Entering Passive Mode (213,78,42,15,136,238)
Cmd: LIST -a
150: Opening ASCII mode data connection for /bin/ls.
226: Transfer complete.
total 1781880
drwxr-xr-x 2 ebay ebay 512 Mar 12 12:30 .
drwxr-xr-x 3 root root 512 Mar 8 18:52 ..
-rw------- 1 ebay ebay 3708 Mar 12 12:21 .bash_history
-rw-r--r-- 1 root ebay 224 Mar 9 00:06 .profile
-rw------- 1 ebay ebay 374 Mar 10 00:49 .sh_history
-rw-r--r-- 1 ebay ebay 873334160 Mar 10 01:25 10gr2_db_sol.cpio.gz

etc

Cheers. That is useful to know. It seems to be working in passive mode, but not active.

But I have just used the same Solaris 10 ftp client and connected to the HP C3600's ftp server. That works in both passive *and* active mode.

So it is hard to see why the sun ftp Server is not working if the client connects in active mode, but the HP one works in either active or passive.

They both have the same hardware firewall and the Sun server misbehaves even if the ipfilter firewall is disabled.

I'm still confused, but you have spread some light on it.

--
Dave K MCSE.

MCSE = Minefield Consultant and Solitaire Expert.

Please note my email address changes periodically to avoid spam.
It is always of the form: month-year@domain. Hitting reply will work
for a couple of months only. Later set it manually.
.



Relevant Pages

  • Re: how do i close an app that has no forms?
    ... FTP connections through Internet Explorer send info ... If you don't have a firewall ... > a connection is instantiated with a server. ... > a request is sent to the FTP server, ...
    (microsoft.public.vb.general.discussion)
  • Re: Windows XP Firewall and FTP programs
    ... > If I disable the Firewall it connects very quickly, ... > FTP software? ... Passive mode tells the server to return a 2nd ... port number for the data connection, and then your FTP program will make a ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Please help with my lack of understanding
    ... When I set something like this up, I set up the firewall to allow VPN/PPTP/GRE traffic through to the server, and nothing else. ... connection. ... And you don't have the FTP server exposed to the Internet. ... Calling an illegal alien an "undocumented worker" is like calling a ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall blocks FTP attempts
    ... > FTP server and have specified this in the wizard. ... > ports, but the firewall still blocks it some way. ... > get some error message of illegal port connection with WS_FTP when I try ...
    (comp.os.linux.security)
  • Re: how do i close an app that has no forms?
    ... > a connection is instantiated with a server. ... > a request is sent to the FTP server, ... > a request back replying over a server specified port. ... > the firewall sees it as a client-side connection and will allow ...
    (microsoft.public.vb.general.discussion)

Loading