Login nicht moeglich
Hallo, ich habe die aktuelle FTP Proxy Suite. Compiliert und installiert. Wenn ich den FTP-Server als eigenen Prozess starte und mich versuche einzuloggen kommt dies: ------------------------- frank@meggy:> frank@meggy:>ftp localhost Connected to localhost. 220-Hello to my SuSE Proxy-FTP Suite 1.7 220- 220 meggy.allcon.net FTP server (Version 1.7 - 1999/10/22 09:22:47) ready. Name (localhost:frank): frank 421 Service not available, remote server has closed connection Login failed. No control connection for command: No such file or directory ftp> by frank@meggy:> -------------------------- Der Server an sich läuft also, nur einloggen kann ich mich nicht. In der Doku habe ich dazu nichts gefunden. Den vorhandenen WuFTP (der funktioniert) habe ich aus dem inet Dämon herausgenommen. Wenn ich den Proxy-FTP übrigens über den inet-Dämon laufen lasse, dann kann ich obige Prozedur nur einmal machen. Beim zweiten Versuch "ftp localhost" kommt nur noch ein "connection refuses" und ich muß den inet-Dämon neu starten um die Login Meldung zu bekommen. Kann mir dabei jemand helfen? gruß frank
On Wed, 24 Nov 1999, Frank Baschin wrote:
Hallo,
ich habe die aktuelle FTP Proxy Suite. Compiliert und installiert.
Ok.
Der Server an sich läuft also, nur einloggen kann ich mich nicht. In der Doku habe ich dazu nichts gefunden. Den vorhandenen WuFTP (der funktioniert) habe ich aus dem inet Dämon herausgenommen.
Hier liegt das Problem: FTP-Proxy ist ja selbst kein Server, also muß er einen Server ansprechen können. I.d.R. ist das einer im Intranet, er kann aber natürlich auf der eigenen Maschine liegen. Vorschlag: den WU-FTP auf einen anderen Port (z.B. 13579 statt 21) legen, und diesen Port in der ftp-proxy Konfiguration eintragen: DestinationAddress localhost DestinationPort 13579 ... und den eigentlichen FTP Server auf 13579 umbiegen.
Wenn ich den Proxy-FTP übrigens über den inet-Dämon laufen lasse, dann kann ich obige Prozedur nur einmal machen. Beim zweiten Versuch "ftp localhost" kommt nur noch ein "connection refuses" und ich muß den inet-Dämon neu starten um die Login Meldung zu bekommen.
Ist im grunde dasselbe Problem.
Kann mir dabei jemand helfen?
Sicher. Gerne.
gruß frank
Volker -- Volker Wiegand Phone: +49 (0) 6196 / 50951-24 SuSE Rhein/Main AG Fax: +49 (0) 6196 / 40 96 07 Mergenthalerallee 45-47 Mobile: +49 (0) 179 / 292 66 76 D-65760 Eschborn E-Mail: Volker.Wiegand@suse.de ++ Only users lose drugs. Or was it the other way round? ++
On Thu, 25 Nov 1999, Volker Wiegand wrote:
[cut]
Would it be too much trouble if the discussions on this mailinglist are done in
English? Or am I the only non German speaking subscriber? Well, I _do_
understand some/most of it, but it's difficult none the less. I started using
the FTP proxy a couple of weeks ago and it does seem to work nicely (the
inbound connection that is). My FTP server can now be reached from outside the
intranet with the PASSIVE option, which is very cool. Good work!
Using it as an outbound proxy introduces some problems though (LISTings are
not always returned to the client and PASSIVE mode does not seem to work
correctly). When I've got some spare time I try to investigate what's wrong.
BTW, I think it would be nice if the FTP proxy can also be configured as an
outbound proxy _only_. It can then listen on a non regular port where users on
the intranet can connect to reach FTP servers on the Internet. This can be done
by adding packet filter rules, but that's not the way to do it.
Greetings,
--
Mike Klinkert
On Fri, 26 Nov 1999, Mike Klinkert wrote:
On Thu, 25 Nov 1999, Volker Wiegand wrote:
[cut]
Would it be too much trouble if the discussions on this mailinglist are done in English? Or am I the only non German speaking subscriber? Well, I _do_ understand some/most of it, but it's difficult none the less. I started using the FTP proxy a couple of weeks ago and it does seem to work nicely (the inbound connection that is). My FTP server can now be reached from outside the intranet with the PASSIVE option, which is very cool. Good work!
Of course we can and should continue in English. Sorry, I should have encouraged everyone right from the beginning. After all, this mailing list is located at our American site, and not my local German one :-)
Using it as an outbound proxy introduces some problems though (LISTings are not always returned to the client and PASSIVE mode does not seem to work correctly). When I've got some spare time I try to investigate what's wrong.
That would be great. I'll also try to reproduce it.
BTW, I think it would be nice if the FTP proxy can also be configured as an outbound proxy _only_. It can then listen on a non regular port where users on the intranet can connect to reach FTP servers on the Internet. This can be done by adding packet filter rules, but that's not the way to do it.
From then on then connection is proxied as you would expect it, and the
Have you considered to bind it only to the interface pointing towards the intranet? This can either be done by using xinetd instead of inetd, or by running the FTP-Proxy in daemon mode with the "Listen" directive. On top of that you would have to activate the "AllowMagicUser" directive, so that your internal users can specify the server they want to connect to. But this would mean that the users have to specify the desired target server when they logon to the FTP-Proxy. For the client this looks like they use the proxy as a server, but when the proxy asks for the USER name, clients have to add the target server name (and port if it's different from ftp=21) to the login name: anonymous@ftp.gnu.org:21 password request already comes from the target server. While this seems sufficient for interactive users (they can use their standard FTP client program), it does not help with browsers or automatic agents. Question: does anybody have a suggestion how to improve this situation?
Greetings,
Volker -- Volker Wiegand Phone: +49 (0) 6196 / 50951-24 SuSE Rhein/Main AG Fax: +49 (0) 6196 / 40 96 07 Mergenthalerallee 45-47 Mobile: +49 (0) 179 / 292 66 76 D-65760 Eschborn E-Mail: Volker.Wiegand@suse.de ++ Only users lose drugs. Or was it the other way round? ++
participants (3)
-
Frank Baschin -
Mike Klinkert -
Volker Wiegand