August 2001 - SUSE Proxy Suite - openSUSE Mailing Lists

question
by maggie samy 29 Aug '01

29 Aug '01

i have a problem i have installed the opera brouser on suse linux i can only logon to the yahoo web site and check my mail but i can't log on to the other email sites i want to know what's the reason for this is there a solution ??? __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/

1 0

Bug in PassiveMinDataPort/PassiveMaxDataPort?
by Martin Köhling 29 Aug '01

29 Aug '01

Hi! While trying to restrict the port range the ftp-proxy uses for PASV data connections, I noticed that apparently the listening port number does NOT get incremented. For example: fw1:~ # telnet ftpproxy1 ftp ... 220 ftpproxy1 FTP server (Version 1.7tp7 - 2001/06/20 21:05:20) ready. user username 331 Password required for username. pass ****** 230 User username logged in. pasv 227 Entering Passive Mode (a,b,c,d,porthigh,portlow) When doing this twice in a row (without first closing the connection or initiating a transfer!), the same port number (PassiveMinDataPort) will be used - and the second attempt will (of course) fail... ("TECH-ERR can't bind Cli-Data to a.b.c.d:41000-41999 for e.f.g.h (errno=98 [Address already in use])") "SockBindRand yes" fixes the problem (at least temporarily). Doesn't this look very much like the DestinationMinPort/ DestinationMaxPort bug mentioned a while ago? (BTW: has that one been fixed yet?) Bye, Martin

1 0

ftp-proxy with parent-proxy?
by Peter Zabelt 28 Aug '01

28 Aug '01

Hallo to all... ...and special thanks to mt ;-). My ftp-proxy is now working fine on a test-station with one eth0 and one ippp0! But that was only the first try. The destination I'll reach ist as follows in a little - and I hope: clear - picture: ------------- ------------ internal eth0| ftp- |eth1 | the parent | ---------------| proxy |--------------------| Proxy (M$) |---->INET Netw. x.x.100.5| |x.x.100.4 x.x.69.20| | ------------- ------------ - I'm not the operator of the parent proxy, I only know its address. - The routing on the ftp-proxy is working fine, I reach the 'x.x.69.20' via ping! - I made all changes, so that my ftp-proxy-conf looks like thisone from the document "transparent_proxy.txt" even I'm not understanding the ! (negotiation) in the second ipchains-rule!?! - The output from ftp-proxy-log ist such as 'can't find <ip_address_of_the_wished_site>. On the client side: 421 Service not available. Has anybody built up such an construction, functioning like in the pic above? Thanks again! Peter.

1 0

The proxy isn' working!
by Peter Zabelt 28 Aug '01

28 Aug '01

Hello again! I'll try again to describe my 'construction' here with some outputs... My config-file is as follows: [-Global-] ActiveMinDataPort 40000 ActiveMaxDataPort 40999 UseMagicChar % AllowMagicUser yes AllowTransProxy yes DestinationAddress 213.174.33.34 DestinationMinPort 42900 DestinationMaxPort 42999 DestinationPort 1088 DestinationTransferMode passive Group nogroup Listen 0.0.0.0 Listen 172.28.100.4 LogDestination /var/log/ftp-proxy.log MaxClients 4 MaxClientsMessage /etc/proxy-suite/ftp-maxclients.txt PassiveMinDataPort 41000 PassiveMaxDataPort 41999 PidFile /var/run/ftp-proxy.pid Port ftp PortResetsPasv yes SameAddress yes ServerType standalone TCPWrapper no TimeOut 900 TranslatedAddress 172.28.100.4 User ftpproxy ValidCommands ABOR, PASS, PASV, STOR, USER, \ WelcomeMessage /etc/proxy-suite/ftp-welcome.txt So, I hope, thats o.k.!?! Any hints? And I think, in inet.d there must be an uncommented ftp line!?! When I now try to make a connection (ftp 172.28.100.4) and I give the user 'anonymous(a)ftp.suse.com' then the following comes up in the log: ftp-child [1221] <08/22-18:38:58> USER-INF connect from 172.28.100.98 ftp-child [1221] <08/22-18:39:15> USER-WRN requested transparent proxy dest 172.28.100.4 is local ftp-child [1221] <08/22-18:39:15> USER-INF 'USER anonymous(a)ftp.suse.com' from 172.28.100.98 ftp-child [1221] <08/22-18:39:15> USER-INF reading data for 'anonymous(a)ftp.suse.com' from cfg-file ftp-child [1221] <08/22-18:39:15> TECH-ERR Srv-Ctrl: can't bind to 0.0.0.0:0 for 172.28.100.98 Sorry! I'm new in the world of ftp-proxies. Can anyone help me, please??? Thanks! Peter.

2 1

proxy-suite + solaris
by Ulrich Hiller 28 Aug '01

28 Aug '01

Dear all, does anybody know a way how to 'make' the proxy-suite on sun solaris 7 and 8 without running into symbol referencing errors and other problems? When I first do a make I get the following: gcc -g -O2 -I. -I.. -c com-socket.c In file included from com-socket.c:74: /usr/include/netinet/ip.h:130: parse error before "n_long" /usr/include/netinet/ip.h:133: parse error before "n_long" /usr/include/netinet/ip.h:135: parse error before '}' token /usr/include/netinet/ip.h:136: parse error before '}' token com-socket.c: In function `socket_ll_read': com-socket.c:934: `FIONREAD' undeclared (first use in this function) com-socket.c:934: (Each undeclared identifier is reported only once com-socket.c:934: for each function it appears in.) com-socket.c: In function `socket_msgline': com-socket.c:1132: warning: deprecated use of label at end of compound statement *** Error code 1 make: Fatal error: Command failed for target `libcommon.a(com-socket.o)' Current working directory /proxy-suite-1.7/common *** Error code 1 make: Fatal error: Command failed for target `all' Regards and thank you for the answer, Ulrich Hiller Ulrich Hiller Max-Planck-Institut fuer Astronomie Koenigstuhl 17 69117 Heidelberg Germany phone +49 6221 528238 fax +49 6221 528246 email hiller(a)mpia-hd.mpg.de

2 1

...I forgot...
by Peter Zabelt 22 Aug '01

22 Aug '01

Hallo 'Listener'! In addition to my last posting I have to tell you, that Have to work to a parent-proxy with the addr 172.28.xxx.xxx (I know it ;-) ) This proxy is reachable with ping... from the 172.28.100.4. Any suggestions friends?? Thanks again! Bye! Peter.

1 0

Error-Msg ...
by Peter Zabelt 20 Aug '01

20 Aug '01

Hallo! I'm new to this list and ow my first question: I built up an ftp-proxy as an transparent one. I connect it from a ftp-program under Windows and got the following message: ... USER-INF reading data for 'anonymous(a)ftp.suse.com' from cfg-file TECH-ERR Srv-Ctrl: can't bind to 0.0.0:0 for <ip_addr-of-the-proxy> >From wich cfg-file will the proxy read the data ??? What's wrong, so that the tech-error is reported?? Thanks! Bye. Peter.

1 0

Re: [proxy-suite] MagicUser
by Marius Tomaschewski 18 Aug '01

18 Aug '01

On Fri, Aug 17, 2001 at 01:59:52PM +0300, Konrads Smelkov wrote: > a) It didn't compile with ./configure && make on slackware 8.0 . > The ftp-cmds.c still wanted to use regex. So i had to gcc it with -DHAVE_REGEX . --disable-regex didn't help... Use the source + patch from ftp://ftp.suse.com/pub/projects/proxy-suite/src > b) There is no UseMagicChar in manual nor in ftp-proxy.conf example. > > [-Global-] > AllowMagicUser yes > DenyString kService out of order ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > DestinationAddress crimson.ej.lv > Group nobody > LogDestination daemon > Port 8021 > ServerType standalone > TranslatedAddress 195.13.196.133 > User nobody Sould work, but if DenyString is set it allways shows the DenyString and exits... Does work a ftp session from the proxy to crimson.ej.lv ? > [ Marius Tomaschewski ] > > > On Thu, Aug 16, 2001 at 08:21:44PM +0300, Konrads Smelkov wrote: > > > Hello > > > > Hi! > > > > > I am here trying to configure outgoing ftp-proxy. > > > AllowMagicUser on > > > > > > azure% telnet 10.0.0.166 1021 > > > Trying 10.0.0.166... > > > Connected to 10.0.0.166. > > > Escape character is '^]'. > > > 220 lackey FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. > > > USER anonymous(a)ftp.linux.org > > > Connection closed by foreign host. > > > azure% > > > > > > There are no error messages, even with -v 4. > > > > Does it run in chroot? What msgs are there? > > > > Is UseMagicChar set to anything? May be usefull if you send your > > config - use something like to remove comments: > > grep -v ^# ftp-proxy.conf | grep -v ^$ > > > > > I am lost. Please guide me wise gurus. > > > > cu, > > Marius Tomaschewski <mt(a)suse.de> > > -- > > SuSE GmbH, Hamburg --- SuSE Labs, Product Developement > > GPG/PGP public key see: http://www.suse.de/~mt/mt.pgp > > Key-FP: DF17 271A AD15 006A 5BB9 6C96 CA2F F3F7 373A 1CC0 Gruesse, Marius Tomaschewski <mt(a)suse.de> -- SuSE GmbH, Hamburg --- SuSE Labs, Product Developement GPG/PGP public key see: http://www.suse.de/~mt/mt.pgp Key-FP: DF17 271A AD15 006A 5BB9 6C96 CA2F F3F7 373A 1CC0

1 0

MagicUser
by Konrads Smelkov 16 Aug '01

16 Aug '01

Hello I am here trying to configure outgoing ftp-proxy. AllowMagicUser on azure% telnet 10.0.0.166 1021 Trying 10.0.0.166... Connected to 10.0.0.166. Escape character is '^]'. 220 lackey FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. USER anonymous(a)ftp.linux.org Connection closed by foreign host. azure% There are no error messages, even with -v 4. I am lost. Please guide me wise gurus.

2 1

squid and dns
by thomas＠hartmann.net 09 Aug '01

09 Aug '01

Hello, I have installed last year some servers with suse 6.4 and squid. They works fine with no need of more actions. But then, some weeks ago I noticed some problems on the dns-servers of the provider. They are now solved, but since then, my proxy-boxes works not in the way I known it? Very often they told me they could not resolve the adresses. After I cleared the cache and restart the proxy-server, the box works fine for one week. But now, I have the same problem very often they could not resolve the adresses. Have anyone an idea? Thomas

2 1