Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Feb 2003 17:31:00 +0300
From:      "Sergey A. Osokin" <osa@freebsd.org.ru>
To:        Igor Pokrovsky <igor.pokrovsky@cnrm.meteo.fr>
Cc:        stable@FreeBSD.org
Subject:   Re: problems with getting through firewall using CVSup
Message-ID:  <20030228143100.GC424@freebsd.org.ru>
In-Reply-To: <3E5F7079.AB60D224@cnrm.meteo.fr>
References:  <200302281312.h1SDCVUE040250@hugo10.ka.punkt.de> <3E5F65CC.281723D0@cnrm.meteo.fr> <20030228135840.GA424@freebsd.org.ru> <3E5F6BE7.823D8A4C@cnrm.meteo.fr> <20030228141030.GB424@freebsd.org.ru> <3E5F7079.AB60D224@cnrm.meteo.fr>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Feb 28, 2003 at 03:21:45PM +0100, Igor Pokrovsky wrote:
> Sergey A. Osokin wrote:
> > On Fri, Feb 28, 2003 at 03:02:15PM +0100, Igor Pokrovsky wrote:
> > > Sergey A. Osokin wrote:
> > > > On Fri, Feb 28, 2003 at 02:36:12PM +0100, Igor Pokrovsky wrote:
> > > > > Patrick M. Hausen wrote:
> > > > >
> > > > > > > > Looks like problems with your firewall...
> > > > > > > > When CVSup tryid to grab the sources - try use netstat command
> > > > > > > > for see state of connection, maybe it helps you.
> > > > > > >
> > > > > > > "netstat -n" produces during attempt to cvsup the following:
> > > > > > > tcp4  0       0       137.129.157.46.1027     198.104.69.57.5999      SYN_SENT
> > > > > > > What does mean state SYN_SENT?
> > > > > >
> > > > > > See:
> > > > > > http://www.ssfnet.org/Exchange/tcp/tcpTutorialNotes.html#ST
> > > > > >
> > > > > > Your system is trying to connect to the server but hasn't received
> > > > > > an answer packet yet.
> > > > >
> > > > > May firewall prevent me from initiating connection to 5999 port?
> > > > > It seems to me, that it handles not only incoming connecting.
> > > > >
> > > > > I tried to telnet to cvsup.fr.freebsd.org to 21 and 5999 ports.
> > > > > The first one works fine, but the last one produces only timeout.
> > > >
> > > > Hm, do you use cvsup with `-P m' flags in command line?
> > >
> > > Yes. And also with "-P -" and "-P a". The same result. :-(
> > 
> > OK. Check one more time rules on your firewall. Use tcpdump
> > on in/out interface and see whats wrong.
> 
> No. Firewall is not on my machine. It is located somewhere upper
> on network.

Talk with your friendly system administrator. Describe him your
problem.

> Unfortunatly it seems to me that it prevents me to
> connect to 5999 port because of local security reasons.

Look at http://www.cvsup.org/faq.html#fwtk with your system
administrator.

> Is there any way to make it work?
> To fool firewall?

Yes, looks like a bad/fool/stupid firewall administriva.

-- 

Rgdz,                        /"\  ASCII RIBBON CAMPAIGN
Sergey Osokin aka oZZ,       \ /    AGAINST HTML MAIL
http://ozz.pp.ru/             X          AND NEWS
                             / \

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030228143100.GC424>