Re: Passive and Active ftp mode

On Mon, Aug 12, 2002 at 11:18:38AM -0400, Ruiyuan Jiang wrote:
> Thanks for your answer, Marius

Hi!

> I changed SockBindRand to "yes" in the proxy configuration file
> and officially register the box on the DNS server. But I got the
> same thing. I don't see any messages in the syslog, etc.
> I do see a message in proxy server log once "ls" command in ftp
> session connection timed out and got back to ftp> prompt:
> 
> ftp-child: TECH-ERR can't connect Cli-Data for 156.146.239.33

The proxy isn't able to connect (data transfer) back to the client.

> What else can I do? Thanks.

The clients are in your internal network, right?

Start i.e. netcat on one of your ftp client machines:

  netcat -v -t -l -p 50021

Try to connect the it from the proxy machine:

  netcat -v -t ftp-client01 50021


Type "hello" - you should see it on the other machine.

Only if this test has worked, the proxy is able to support
active ftp on the client side.

There souldn't be any NAT or Masquerading between the
proxy and the client.
It is possible to use NAT between proxy and server - you
may need to set TranslatedAddress propelly in some cases.

Kind regards,
 Marius Tomaschewski <[email protected]>
--
 SuSE Linux AG, NÃŒrnberg - SuSE Labs, Product Developement
 PGP public key available:   http://www.suse.de/~mt/mt.pgp
 Fprint:  EA 1F 92 75 1A F9 82 07  A1 28 DE 7A 32 E8 97 18

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]