[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kfm-devel
Subject:    Bug#26071: ftp to sites outside firewall fails to connect
From:       Nick Thompson <nickthompson () agere ! com>
Date:       2001-06-29 8:36:51
[Download RAW message or body]

David,

The other David (yes, Faure) fixed it. It is possible to disable passive mode in
kio_ftprc, which does the trick. I assumed this somehow keeps the socket range
firewall vaild. I take your point about the 1803 port not being valid until
you're shuttled off, as you put it, but I would have expected to get connection
refused. In this case telnet just stops and waits indefinately, which smacks of
the packets being dumped at the firewall.

Anyway, tis fixed, but thanks for your help.

Nick.

David Bishop wrote:

> ftp is on port 21, so to test it, try 'telnet 148.88.2.11 21', not 1803.
> The 1803 is almost definetly a "temp" port, that it shuttles you to after
> making the connection, and won't be valid for any other process.  Of course,
> I could also be talking out of my butt :-)  (it's been too long since dealing
> with this crap).
>
> HTH,
>
> David (not Faure) Bishop
>
> On Thursday 28 June 2001 06:40, Nick Thompson wrote:
> > David,
> >
> > I think this is the relevant output:
> >
> > [snip]
> > kio_ftp: cwd /sites/sunsite.uio.no/pub/unix/Linux/Mandrake/8.0/i586/
> > kio_ftp: resp> 250 Current directory now
> > /sites/sunsite.uio.no/pub/unix/Linux/Mandrake/8.0/i586
> > kio_ftp:
> > kio_ftp: type A
> > kio_ftp: resp> 200 Type set to A
> > kio_ftp:
> > kio_ftp: EPSV
> > kio_ftp: resp> 500 Unknown command `EPSV'
> > kio_ftp:
> > kio_ftp: disabling use of EPSV
> > kio_ftp: PASV
> > kio_ftp: resp> 227 Entering Passive Mode (148,88,2,11,11,7)
> > kio_ftp:
> > kdecore (KSocket): Trying to connect to Inet 148.88.2.11 port 1803
> > kdecore (KSocket): Socket 6 created
> >
> > I tried a command line telnet:
> >
> > Nick-> telnet 148.88.2.11 1803
> > Trying 148.88.2.11...
> >
> > It hangs right there. Maybe this is just a firewall issue with that socket,
> > but it used to work in konqi and it still works in netscape and commandline
> > ftp (so it must be possible):
> >
> > Nick-> ftp 148.88.2.11
> > Connected to 148.88.2.11.
> > 220 UK Mirror Service FTP server version 1.4 ready
> > Name (148.88.2.11:nickthom): anonymous
> > 331 Guest login ok: please send your email address as the password
> > Password:
> > 230-  Welcome to the UK Mirror Service funded by JISC
> > 230-  More information can be found at our web site:
> > http://www.mirror.ac.uk/ 230-  Please send comments or questions to
> > help@mirror.ac.uk
> > 230 Logged in for anonymous FTP
> > ftp> ls
> > 200 Data port set
> > 150 About to open data connection
> > collections
> > indexes
> > sites
> > ukms
> > 226 Transfer complete
> > 35 bytes received in 0.011 seconds (3.21 Kbytes/s)
> >
> > Hope that gets us somewhere,
> > Nick.
> >
> > David Faure wrote:
> > > On Thursday 21 June 2001 18:14, Nick Thompson wrote:
> > > > Still doesn't work. I updated from CVS today and it still behves the
> > > > same. I notice in my initial report I gave the date as 20000518. Should
> > > > have been 20010518, but you can make it 20010621 now.
> > > >
> > > > I have an extra clue though. Its not that kio_ftp can't talk to the ftp
> > > > server. I tried to ftp to a site that was down today and it correctly
> > > > told me that it couldn't connect. Then I connected to a site that was
> > > > up. It definately connects to the specified server, but non of the
> > > > directories/files are displayed and the dir listing never completes or
> > > > times out. I connected to ftp.mirror.co.uk over 30 mins ago and the KDE
> > > > cog is still spinning...
> > >
> > > Can you get kio_ftp's debug output ?
> > > See http://www.konqueror.org/bug.html, section HTTP - the same
> > > instructions can be applied for FTP.
>
> --
> "To me vi is Zen.  To use vi is to practice zen. Every command is
> a koan. Profound to the user, unintelligible to the uninitiated.
> You discover truth everytime you use it." reddy@lion.austin.ibm.com
>
> dbishop@micron.com

--
   _  _______  __ __
  / \/ / / __\/ // /\ Nick Thompson          | Agere Systems Ltd
 /    / / /__/ _  / / nickthompson@agere.com | Microelectronics House
/_/\_/_/____/_/\\_\/  Tel: +44 1344 865951   | Kingswood, Kings Ride
\_\/\\_\____\_\/ \_\  Fax: +44 1344 865959   | Ascot, Berkshire SL5 8AD

[prev in list] [next in list] [prev in thread] [next in thread]