Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Jul 2002 09:18:52 -0500
From:      "Raja Velu" <raja@micronetusa.com>
To:        <freebsd-questions@freebsd.org>, "'Dan Nelson'" <dnelson@allantgroup.com>
Cc:        <ryan@wonko.com>
Subject:   RE: Browser-based FTP access as part of a web page - SOLVED
Message-ID:  <001501c2242e$e37b4f40$1d00a8c0@www.micronetusa.com>
In-Reply-To: <20020701185505.GA8295@dan.emsphone.com>

next in thread | previous in thread | raw e-mail | index | archive | help

> In the last episode (Jul 01), Raja Velu said:
> > The FTP URL actually points to the BSD Server's IP
> (1.2.3.4) - not to
> > the Windows 2000 server. So, I have not setup any forwarding rules
> > for that. I am failing to understand why, all of a sudden, there is
> > request for communication from the web browser to an arbitrary port
> > on the BSD server (please see the last lines on either of my logs
> > above).
>
> That's probably the data connection for the result of the "LIST"
> command.  With passive mode FTP, both the control and data connections
> are initiated by the client.  With active FTP, the server initiates
> data connections back to the client.  I couldn't tell you why Explorer
> decides to use passive mode on pages with frames and active otherwise,
> though.
>
> Active FTP breaks servers behind simple packet filters, Passive FTP
> breaks clients behind simple packet filters :)  For this discussion,
> ipfw is a simple packet filter; natd is not.  You may need to open
> ports 49152-65535 to allow for passive incoming connections.
>
> --
> 	Dan Nelson

Thanks for the opening up the possibility of passive FTP. I have now opened
up ports 49152-65535 on my IPFW rule set and everything is going on fine.

Rgds,
Raja


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001501c2242e$e37b4f40$1d00a8c0>