RE: FTP thro' firewall
I believe you need to use PASSIVE mode/transfert.
-----Original Message-----
From: Martin WHEELER [SMTP:mwheeler@startext.co.uk]
Sent: Tuesday, August 28, 2001 6:33 PM
To: debian-isp@lists.debian.org
Cc: Alisson Sellaro; Chris Wagner
Subject: Re: FTP thro' firewall
On Tue, 28 Aug 2001, Chris Wagner wrote:
> The WS FTP thingy you're refering to is for going through proxies.
... so much for Windows ...
> just set up port forwarding on the firewall ...
> and only allow ftp connections from your known boxes to pass
> through. Allow nothing from the jungle side. You should then be able to
> transparently connect to the outside world.
Done. (Difficult with Mandrake SNF sans manual, but done.)
Now I can ftp to my ISP; connect; authenticate; do a pwd and get the
right response -- then ls/get/put etc. just hang the connection -- which
eventually times out at the client end, saying:
230 User <xxxxxxxx> logged in, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
257 "/u/x/x/x/xxxxxxxx" is current directory.
ftp> cd docs
250 CWD command successful.
ftp> ls
200 PORT command successful.
. . . . .
425 Can't build data connection: Operation timed out.
ftp>
Huh?
Any clueful hints; comments?
[ Interestingly, sftp gives:
root@<lmachine> sftp <rmachine>.co.uk
Connecting to <rmachine>.co.uk...
Protocol major versions differ: 2 vs. 1
Connection closed
root@<lmachine>:~#
ISP (UK's biggest) now claims that Un*x is not supported by them; and on
being upbraided at supporting only Evil Empire boxen, responded : "At
the end of the day, all things said and done, it is _the_ standard,
isn't it?".
Gawdelpus. ]
--
Martin Wheeler - StarTEXT - Glastonbury - BA6 9PH - England
mwheeler@startext.co.uk http://www.startext.co.uk/
www.gateway.gov.uk -- the UK government's ?18M Microsoft-only website
-- "all your government database are belong to us" --
--
To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: