Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 May 2000 16:05:44 -0600
From:      Brad Waite <brad@ssbaptist.net>
To:        Steffen Vorrix <steffen@ntr.net>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Firewall Problem.
Message-ID:  <391B2EB8.EA93EE8D@ssbaptist.net>
References:  <000901bfbb8f$22bea4a0$fd03a8c0@ws028> <391B277B.231CFA01@ssbaptist.net> <006101bfbb93$31ce6620$fd03a8c0@ws028>

next in thread | previous in thread | raw e-mail | index | archive | help
Steffen,

Your login info is transmitted over the control line.  When you issue a
command that requires output or try to GET a file, the ftp server opens
a socket back to the client, after the two have negotiated which ports
they'll use.  If it's not dns-related, I'm thinking that it might have
to do with the necessity of accepting connections to the client on high
TCP ports.

-Brad

Steffen Vorrix wrote:
> 
> Brad...
> 
> Just for grins, I tried that... I keep forgetting to post all the things
> that I have tried... :)  I created entried for both client side and server
> side firewalls in the respective hosts file.  When looking at the headers
> with tcpdump, I could see that the host information did infact come from the
> hosts file with the information that I added.  But it still hung AFTER I
> logged in, which got me thinking... If it were timing out, it should do it
> before I ever log in, right?  I shoulnd't even be able to connect, right?
> 
> Steffen
> 
> ----- Original Message -----
> From: "Brad Waite" <brad@ssbaptist.net>
> To: "Steffen Vorrix" <steffen@ntr.net>
> Sent: Thursday, May 11, 2000 5:34 PM
> Subject: Re: Firewall Problem.
> 
> > Steffen,
> >
> > I think you've hit the nail on the head.  I'm guessing that your ftp
> > server is timing out trying to lookup the name for Server 2's IP when it
> > opens the FTP data connection to the Client.  I don't know if adding an
> > entry in your client's /etc/hosts would work, but if it doesn't add the
> > entry to your dns servers and see how it goes.
> >
> > Steffen Vorrix wrote:
> > >
> > > Oh yeah, I forgot to mention.  The 205.198.90.x address has a reverse
> DNS
> > > entry, but the 205.198.90.x+1 does not.  Would this be causing any of
> the
> > > problems?
> > >
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-questions" in the body of the message
> >
> > --
> > Brad Waite
> > Media Director - South Sheridan Baptist Church
> > (303) 922-8304 x225         brad@ssbaptist.net
> >

-- 
Brad Waite
Media Director - South Sheridan Baptist Church
(303) 922-8304 x225         brad@ssbaptist.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?391B2EB8.EA93EE8D>