Date: Wed, 28 Jul 1999 12:41:22 +0100 From: Brian Somers <brian@FreeBSD.org.uk> To: Loren Daniel Koss <loren@pciway.com> Cc: Brian Somers <brian@Awfulhak.org>, freebsd-questions@FreeBSD.ORG Subject: Re: FTP through NATD.. Message-ID: <199907281141.MAA01614@keep.lan.Awfulhak.org> In-Reply-To: Your message of "Tue, 27 Jul 1999 17:11:03 PDT." <Pine.BSF.4.10.9907271709210.433-100000@unix.pciway.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
The only other thing I can think of is that your client may be having
a problem with the port number from which the back-channel comes.
You could try the -same_ports switch - it may help, although I belive
it's the default anyway.
If all else fails, passive mode on the client is probably the best
thing to aim for :-/
> No, I'm trying to get *in* to a "dodgy" (are you english?) ftp port..
> Actually, I have it exposed to the world as 8002, but internally on my NT
> box it is 6002. It could very well be 8002 on the internal, but for some
> reason when I tried 6002 on the 216.32.46.218, it failed, so I moved it..
> I Like I said, I can still connect.. I just can't do anything over the
> data connection.. It fails on the PORT command.. What do you think is
> the problem?
>
> Loren
>
> On Wed, 28 Jul 1999, Brian Somers wrote:
>
> > Hmm, I thought you were trying to get *out* to a dodgy ftp port.... I
> > didn't read your post properly. You don't need to use passive mode
> > for this.
> >
> > Shouldn't your config say something like
> >
> > redirect_port tcp 192.168.1.20:6002 216.32.46.218:6002
> >
> > assuming the incoming packets are addressed to 216.32.46.218 ? Is
> > the 8002 below a typo ?
> >
> > > Okay, I did that and now it just hangs after it connects and tries to do
> > > a listing of the files.. What should
> > > the NATD.CONF file look like? I have:
> > >
> > > redirect_port tcp 192.168.1.20:6002 216.32.46.218:8002
> > >
> > > It's really weird..
> > >
> > > Thanks for your help.
> > >
> > > Loren
> > >
> > > On Tue, 27 Jul 1999, Brian Somers wrote:
> > >
> > > > > Brian,
> > > > > do you mean passive mode on the FTP server? Its a WIN NT box.. Or do you
> > > > > mean passive mode of NATD or something? Sorry I'm such a newbie..
> > > >
> > > > Passive mode on the client side.
> > > >
> > > > Passive mode basically means that the server does not try to open up
> > > > a second channel back to the client. The NAT stuff can only handle
> > > > this sort of thing if it can recognise the ``PORT'' command going out
> > > > on the original channel (it then prepares itself for the
> > > > back-connect), but natd only looks for PORT commands on the standard
> > > > ftp port.
> > > >
> > > > > On Tue, 27 Jul 1999, Brian Somers wrote:
> > > > >
> > > > > >
> > > > > > > I am having a helluva time with this.. I moved the port of my FTP server
> > > > > > > that is behind my FreeBSD box to 6002.. I am able to connect to it from
> > > > > > > the outside just fine, except for doing any LIST, PUT, or GETs.. They get
> > > > > > > me a "INVALID PORT COMMAND" Does anyone know how to solve this??
> > > > > >
> > > > > > If you're not using the standard ftp port, you *must* use passive
> > > > > > mode ftp (otherwise libalias won't detect and fix the port command).
> > > > > >
> > > > > > Passive mode is enabled in FreeBSD with ``-p''.
> > > > > >
> > > > > > > Thanks
> > > > > > > Loren
> > > > > > >
> > > > > > > loren@pciway.com
--
Brian <brian@Awfulhak.org> <brian@FreeBSD.org>
<http://www.Awfulhak.org>; <brian@OpenBSD.org>
Don't _EVER_ lose your sense of humour ! <brian@FreeBSD.org.uk>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199907281141.MAA01614>