RE: anonymous ftp fails via web page...

A few questions...

Which ports are opened on your firewall for incoming ftp?
Is your ftp anonymous?  
Are user permissions configured properly in netscape?

-Tom Wachs

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of ian diddams
Sent: Friday, April 23, 2004 11:01 AM
To: [email protected]
Subject: anonymous ftp fails via web page...


scenario : local network behind firewall.  www server on one one
system (redhat 9), ftp server (wu-ftpd 2.6.2-8) on another (redhat
7.3).  All servers nat'd.  www server serves a web page with a ftp
link to a file on the ftp server (running anonomous ftp).  From inside
the local network (ie behind the firewall) I can view the web page
fine, and "download" the file via ftp ok (url is
ftp://ftp.<domain>/pub/<file>).

However...  outside the firewall, while I can certainly use command
line ftp successfully to retreive the file, if I try and do it via the
web page it fails with "The connection was refused when attempting to
contact ftp.<domain>" (netscape 7).

If I check on the ftp server when such an unsuccessful ftp attempt is
made, I see the following reported in various system files

messages :

Apr 21 08:54:25 desk2 ftpd[9167]: wu-ftpd - TLS settings: control
allow, client_cert allow, data allow
Apr 21 08:54:25 desk2 ftpd[9167]: ANONYMOUS FTP LOGIN FROM <external
FQDN> [<external IP>], [email protected]

secure :

Apr 21 08:54:25 desk2 xinetd[9163]: START: ftp pid=9167 from=<external
ip address>


i.e. no errors reported internally

Also,
#ps -ef | grep ftp
ftp       9167  9163  0 08:54 ?        00:00:00 ftpd:
clockwork.orange.net: anon

... i.e. the opened process is still "live"



So - why does it work behind the firewall, but not outside of it, when
a command line session works fine?  Any ideas?

cheers

ian