no passive ftp to quimby?

no passive ftp to quimby?

[Brian Edmonds]

I've historically mirrored the gnus releases off of quimby to my home
system.  However in the last month or more I've been unable to do so due 
to quimby refusing to deal with passive ftp:

lios [1922]$ ftp -i quimby.gnus.org
Connected to quimby.gnus.org.
220 ProFTPD 1.2.0pre3 Server (Gnus Distribution Center) [quimby.gnus.org]
331 Anonymous login ok, send your complete e-mail address as password.
230 Anonymous access granted, restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> passive
Passive mode on.
ftp> dir
227 Entering Passive Mode (193,69,4,139,117,168)
ftp: connect: Connection refused
ftp> 

I'm behind a packet filter that drops SYNs except to ports where I'm
offering services, so I really need to be able to use passive mode.

Brian.

Re: no passive ftp to quimby?

[Lars Magne Ingebrigtsen]

Brian Edmonds <brian@gweep.bc.ca> writes:

> 227 Entering Passive Mode (193,69,4,139,117,168)
> ftp: connect: Connection refused
> ftp> 
> 
> I'm behind a packet filter that drops SYNs except to ports where I'm
> offering services, so I really need to be able to use passive mode.

Passive mode uses what port on the ftp server?  It's behind a
firewall... 

-- 
(domestic pets only, the antidote for overdose, milk.)
   larsi@gnus.org * Lars Magne Ingebrigtsen

Re: no passive ftp to quimby?

[Brian Edmonds]

Lars Magne Ingebrigtsen <larsi@gnus.org> writes:
> Passive mode uses what port on the ftp server?  It's behind a
> firewall...

It uses a random port by default, but you can set a range in ftpaccess
(with wu-ftpd, ymmv with others).  On my server, for example, I have
"passive ports 0.0.0.0/0 51234 51264" in ftpaccess, and I let SYNs
through to TCP ports 51234-51264 so passive ftp works.  The ports were
chosen pretty much randomly to be out of the way of anything else, and
in quite a narrow range to minimize the security risk.

Brian.

Re: no passive ftp to quimby?

[Lars Magne Ingebrigtsen]

Brian Edmonds <brian@gweep.bc.ca> writes:

> It uses a random port by default, but you can set a range in ftpaccess
> (with wu-ftpd, ymmv with others).  On my server, for example, I have
> "passive ports 0.0.0.0/0 51234 51264" in ftpaccess, and I let SYNs
> through to TCP ports 51234-51264 so passive ftp works. 

I'm using proftpd, and I can't find anything in the documentation
about what passive ports it's using...

-- 
(domestic pets only, the antidote for overdose, milk.)
   larsi@gnus.org * Lars Magne Ingebrigtsen