From: "wickedsun" <wickedsun@phreaker.net>
To: netfilter@lists.netfilter.org
Subject: Re: ftp server issue, trying to DL 1.2.7a
Date: Thu, 5 Sep 2002 18:00:25 -0400 (Eastern Daylight Time) [thread overview]
Message-ID: <3D77D3F9.000003.00568@athlon1000> (raw)
In-Reply-To: 200209051832.g85IWIv01221@vulcan.rissington.net
[-- Attachment #1: Type: Text/Plain, Size: 1556 bytes --]
I've had this issue back in the ipchains days. :)
Its quite simple. If you make iptables change your destination IP for a
certain port (like the module for FTP used to do in 2.2) well passive does
not work because it changes your IP address on the fly. If you have made a
port work for active, passive will not work on that same port.
I dont think there is any workaround (yet). It is a pain, because if you
want to FTP and FXP from a port X, you'll have to stay in passive mode.
-------Original Message-------
From: Antony Stone
Date: Thursday, September 05, 2002 14:56:10
To: netfilter@lists.netfilter.org
Subject: Re: ftp server issue, trying to DL 1.2.7a
On Thursday 05 September 2002 6:29 pm, Rob wrote:
> Anyone else having this problem?
>
>
> Connected to ftp.iptables.org (62.128.28.62).
> 220 ProFTPD 1.2.5rc1 Server (netfilter/iptables FTP site) [kashyyyk]
> Name (ftp.iptables.org:root): anonymous
> 331 Anonymous login ok, send your complete email address as your password.
> Password:
> 230 Anonymous access granted, restrictions apply.
> Remote system type is UNIX.
> Using binary mode to transfer files.
> ftp> dir
> 227 Entering Passive Mode (62,128,28,62,182,53).
Works fine for me in active mode:
drwxr-xr-x 2 ftpuser ftpgroup 4096 Jul 22 14:45 incoming
drwxr-xr-x 7 ftpuser ftpgroup 4096 Jul 24 07:36 pub
But like you, I can't get a listing in passive mode.....
Antony.
--
This email was created using 100% recycled electrons.
.
[-- Attachment #2: Type: Text/HTML, Size: 3102 bytes --]
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="IncrediMail 1.0" name=GENERATOR>
<!--IncrdiXMLRemarkStart>
<IncrdiX-Info>
<X-FID>FLAVOR00-NONE-0000-0000-000000000000</X-FID>
<X-FVER></X-FVER>
<X-CNT>;</X-CNT>
</IncrdiX-Info>
<IncrdiXMLRemarkEnd-->
</HEAD>
<BODY style="BACKGROUND-POSITION: 0px 0px; FONT-SIZE: 12pt; MARGIN: 5px 10px 10px; FONT-FAMILY: Arial" bgColor=#ffffff background="" scroll=yes ORGYPOS="0" X-FVER="3.0">
<TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0>
<TBODY>
<TR>
<TD id=INCREDITEXTREGION style="FONT-SIZE: 12pt; CURSOR: auto; FONT-FAMILY: Arial" width="100%">
<DIV>I've had this issue back in the ipchains days. :)</DIV>
<DIV>Its quite simple. If you make iptables change your destination IP for a certain port (like the module for FTP used to do in 2.2) well passive does not work because it changes your IP address on the fly. If you have made a port work for active, passive will not work on that same port.</DIV>
<DIV> </DIV>
<DIV>I dont think there is any workaround (yet). It is a pain, because if you want to FTP and FXP from a port X, you'll have to stay in passive mode.</DIV>
<DIV><BR> </DIV>
<DIV id=IncrediOriginalMessage><I>-------Original Message-------</I></DIV>
<DIV> </DIV>
<DIV id=receivestrings>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>From:</B></I> <A href="mailto:Antony@Soft-Solutions.co.uk">Antony Stone</A></DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>Date:</B></I> Thursday, September 05, 2002 14:56:10</DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>To:</B></I> <A href="mailto:netfilter@lists.netfilter.org">netfilter@lists.netfilter.org</A></DIV>
<DIV dir=ltr style="FONT-SIZE: 11pt" <i><B>Subject:</B></I> Re: ftp server issue, trying to DL 1.2.7a</DIV></DIV>
<DIV> </DIV>On Thursday 05 September 2002 6:29 pm, Rob wrote:<BR><BR>> Anyone else having this problem?<BR>><BR>><BR>> Connected to ftp.iptables.org (62.128.28.62).<BR>> 220 ProFTPD 1.2.5rc1 Server (netfilter/iptables FTP site) [kashyyyk]<BR>> Name (ftp.iptables.org:root): anonymous<BR>> 331 Anonymous login ok, send your complete email address as your password.<BR>> Password:<BR>> 230 Anonymous access granted, restrictions apply.<BR>> Remote system type is UNIX.<BR>> Using binary mode to transfer files.<BR>> ftp> dir<BR>> 227 Entering Passive Mode (62,128,28,62,182,53).<BR><BR>Works fine for me in active mode:<BR><BR>drwxr-xr-x 2 ftpuser ftpgroup 4096 Jul 22 14:45 incoming<BR>drwxr-xr-x 7 ftpuser ftpgroup 4096 Jul 24 07:36 pub<BR><BR>But like you, I can't get a listing in passive mode.....<BR><BR>Antony.<BR><BR>-- <BR><BR>This email was created using 100% recycled electrons.<BR><BR><BR>. </TD></TR>
<TR>
<TD id=INCREDIFOOTER width="100%">
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD width="100%"></TD>
<TD id=INCREDISOUND vAlign=bottom align=middle></TD>
<TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>
next prev parent reply other threads:[~2002-09-05 22:00 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-09-05 17:29 ftp server issue, trying to DL 1.2.7a Rob
2002-09-05 18:30 ` Rob
2002-09-06 1:50 ` Fabrice MARIE
2002-09-05 18:32 ` Antony Stone
2002-09-05 22:00 ` wickedsun [this message]
2002-09-05 18:33 ` Ramin Alidousti
2002-09-05 19:57 ` Alistair Tonner
2002-09-06 9:39 ` Anders Fugmann
2002-09-07 12:38 ` wickedsun
2002-09-07 13:18 ` Anders Fugmann
2002-09-07 15:33 ` wickedsun
2002-09-07 15:40 ` Alistair Tonner
[not found] <002901c2551c$f5dd4700$3200a8c0@fcol.com>
2002-09-05 21:34 ` Rob
2002-09-05 22:37 ` R. Sterenborg
2002-09-06 3:49 ` Rob
2002-09-06 6:05 ` R. Sterenborg
-- strict thread matches above, loose matches on Subject: below --
2002-09-10 3:51 Rob
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3D77D3F9.000003.00568@athlon1000 \
--to=wickedsun@phreaker.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox