Re: Question about log entry

On Fri, Apr 12, 2002 at 11:33:27AM +0200, [email protected] wrote:
> Hi,

Hi!

Sometimes it may happen, if you limit port-ranges ("SockBindRand yes"
helps there) the proxy is allowed to use, but in the config bellow
are no port limits, so this is not the reason for...

OK. The proxy trys to connect (for data-xfer) the IP+port of the
ftp-server to a IP and port the ftp-server said to the proxy and
and gets a connection refused.

Does the host use any IP filter (i.e. the SuSEpersonal-firewall) ?
Is masquerading used between the proxy and 192.168.1.12?
Which ftp-server is running on 192.168.1.12?

> our ftp-proxy has been working well for weeks.
> But soemtimes it keeps sending messages like the following to our syslog:
> 
> Apr 11 16:26:40 hostname ftp-child[10250]: TECH-ERR can't connect
> Cli-Data for 192.168.1.12 (errno=111 [Connection refused])
> 
> Could anyone please tell us what this means? Do we have a configuration
> problem?
> 
> We are using  version 1.8 of proxy-suite on SuSE 7.2
> Here's our config file:
> 
> AllowMagicUser  yes
> AllowTransProxy yes
> DestinationTransferMode passive
> Group                   nogroup
> Listen          <internal adress>
>  LogDestination daemon
> LogLevel                INF
> PortResetsPasv yes
> ServerRoot              /chroot/ftp-proxy
> ServerType              standalone
> User                    ftpproxy
> UseMagicChar            @
> 
> Any help would be greatly appreciated.

Gruesse,
 Marius Tomaschewski <[email protected]>
--
 SuSE Linux AG, Nürnberg - SuSE Labs, Product Developement
 PGP public key available:   http://www.suse.de/~mt/mt.pgp
 Fprint:  EA 1F 92 75 1A F9 82 07  A1 28 DE 7A 32 E8 97 18

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]