I'm having some fun with SuSE and FTP.
If the firewall on the server is turned off, the client works perfectly happily. But if the firewall on the server is turned on, it won't. I have opened up both 20 and 21 TCP and UDP to a limited IP range (within my network), but it just won't have any of it. I can log in, but I can't ls or change directory.
Anyone got any suggestions?
Many thanks in advance.
D.
Is passive transfer activated on client? if yes, the pc with the firewall (or the server behind the firewall) must be allowed to open up a transmission channel on some higher port OUTGOING and the client must be allowed to be accessed there INCOMING ... take a look at passive transfer transmissions ... maybe thats a point to look at.
Michael
----- Original Message ----- From: suseuser@blackcatsys.plus.com To: suse-security@suse.com Sent: Tuesday, April 29, 2003 5:10 PM Subject: [suse-security] SuSE and VSFTP
I'm having some fun with SuSE and FTP.
If the firewall on the server is turned off, the client works perfectly happily. But if the firewall on the server is turned on, it won't. I have opened up both 20 and 21 TCP and UDP to a limited IP range (within my network), but it just won't have any of it. I can log in, but I can't ls or change directory.
Anyone got any suggestions?
Many thanks in advance.
D.
On Tue, Apr 29, 2003 at 03:10:22PM +0000, suseuser@blackcatsys.plus.com wrote:
If the firewall on the server is turned off, the client works perfectly happily. But if the firewall on the server is turned on, it won't. I have opened up both 20 and 21 TCP and UDP to a limited IP range (within my network), but it just won't have any of it. I can log in, but I can't ls or
A second TCP connection is neccessary to transfer the directory listing. Same situation occurs when get, put, ... is used. Toggle passive mode and try again. If passive mode is not used, the second TCP connection is opend in the opposite direction. If passive mode is used, two high ports are used. The pasv_min_port and pasv_max_port parameters in /etc/vsftpd.conf may be used to choose a port range on the server side.
change directory.
This sounds strange to me. The transfer of the content of a .message file may fail, but the cd should work. Not shure about that.
Hi list!
I (as a newbie jumping from RH), have a question: why I cannot acces the updatedb and locate commands in Suse 8.2, although I see that they are mentioned in the manual?
Regards, Sourian
On Apr 30, Sourian sourian@go.ro wrote:
I (as a newbie jumping from RH), have a question: why I cannot acces the updatedb and locate commands in Suse 8.2, although I see that they are mentioned in the manual?
The package is no more installed by default. It is called "findutils-locate". To install it without yast, put in your first (or any) CD and do zgrep findutils-locate INDEX.gz This will spit out the disc it is on. You can then manually install it from commandline (rpm -ivh findutils-locate....rpm). If you don't know the package, try zgrep bin.locate ARCHIVES.gz (only on the first CD) ^This could also be "/", but "." is shorter to write ;)
Markus
-
Markus Gaugusch -
Michael Haunzwickl -
Sourian -
Stefan Andreas Tichy -
suseuser＠blackcatsys.plus.com