[Fwd: Re: [BSD] firewall probléma (???)]

[Laszlo Nagy]

>
> Hali
>
> Laszlo Nagy wrote:
>>> nem tudom a dolgot mert az adott IP-röl nem tudok csatlakozni. (Hogy 
>>> máshogy teszteljem?)
> Itt az alábbi dolgok szokták azonnal kipróbálni:
>
> 1. Próbáltad-e úgy hogy teljesen kikapcsolod a tüzfalat?
>
> 2. Ha máshova csatlakozol ftp szerverhez, arra sem megy? (figyelj, ez
> nem az hogy a célgépet más gépekröl próbálod, hanem ennen a gépnek a
> hibakereséséröl van szó bármilyen más irányba)
>
> Mert pont az furcsa hogy máshonnan mindenhonnan megy csak a tiédröl nem.
Igen, megy, lásd a tesztet alább. Ha ugyanezt megcsinálom a másik ftp 
szerverrel akkor az nem megy. Még az az ötletem lett volna hogy mi van 
ha az active connection egy másik IP-ről jön vissza. De miután 
kikapcsolt tűzfallal sem ment, ezért kezdem azt hinni hogy nem nálam van 
a hiba. Szerintetek?

   Laci

gandalf at designaproduct.biz/home/gandalf#host ftp.funet.fi
ftp.funet.fi has address 193.166.3.2
ftp.funet.fi has IPv6 address 2001:708:10:9::20:1
ftp.funet.fi mail is handled by 10 mail.nic.funet.fi.
gandalf at designaproduct.biz/home/gandalf#ipfw add 00001 allow tcp from 
193.166.3.2 to me in
00001 allow tcp from 193.166.3.2 to me in
gandalf at designaproduct.biz/home/gandalf#ftp -d -A ftp.funet.fi
Trying 2001:708:10:9::20:1...
Trying 193.166.3.2...
Connected to ftp.funet.fi.
220---------- Welcome to Pure-FTPd [privsep] ----------
220-You are user number 225 of 1000 allowed.
220-Local time is now 16:59. Server port: 21.
220-Only anonymous FTP is allowed here
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 30 minutes of inactivity.
ftp_login: user `<null>' pass `<null>' host `ftp.funet.fi'
Name (ftp.funet.fi:gandalf): anonymous
---> USER anonymous
331-Welcome to the FUNET anonymous ftp archive
331-
331-
331-FTP.FUNET.FI is a service of the Finnish Academic and Research Network
331-FUNET, and is located at CSC,the Finnish IT center for science,
331-in Keilaranta 14, Espoo, Finland
331-
331-The main server is a Primepower 450 from Fujitsu-Siemens Computers.
331-It has four SPARC64 V processors and 16 Gigabytes of memory
331-Main storage is a fully redundant EMC Fibrecat CX300
331-fiber channel RAID array currently with 3TB of space for public files.
331-We have a dedicated 1Gbit/s connection to Funet which in turn connects
331-with 10Gbit/s to NORDUnet, Geant and Internet2.
331-
331-This archive is also available over the IPv6 network via 
ftp.ipv6.funet.fi
331-WWW-browser users can also try http://www.nic.funet.fi/pub/
331-
331-See the README file for more information about this archive.
331-
331-All anonymous FTP transactions will be logged for possible later 
analysis
331-and statistics.  If you don't like this policy, please disconnect now!
331-
331-Please mail to problems at nic.funet.fi in case of problems
331-
331-Monday 15-19 finnish time is the regular Funet service window
331-We may have service breaks earlier on Mondays or some other days if 
necessary
331 Any password will work
Password:
---> PASS XXXX
230 Any password will work
---> SYST
215 UNIX Type: L8
Remote system type is UNIX.
Using binary mode to transfer files.
---> FEAT
211-Extensions supported:
 EPRT
 IDLE
 MDTM
 SIZE
 REST STREAM
 MLST type*;size*;sizd*;modify*;UNIX.mode*;UNIX.uid*;UNIX.gid*;unique*;
 MLSD
 TVFS
 ESTP
 PASV
 EPSV
 SPSV
 ESTA
211 End.
features[FEAT_FEAT] = 1
features[FEAT_MDTM] = 1
features[FEAT_MLST] = 1
features[FEAT_REST_STREAM] = 1
features[FEAT_SIZE] = 1
features[FEAT_TVFS] = 1
got localcwd as `/usr/home/gandalf'
---> PWD
257 "/" is your current location
got remotecwd as `/'
ftp> ls
---> EPRT |1|195.228.74.135|63505|
200 PORT command successful
---> LIST
150 Connecting to port 63505
lrwxrwxrwx    1 0        0              32 Mar 30  2006 README -> 
/pub/files/staff-docs/README.FTP
lrwxrwxrwx    1 0        0              38 Mar 23  2006 README.FILETYPES 
-> /pub/files/staff-docs/README.FILETYPES
lrwxrwxrwx    1 0        0              37 Mar 23  2006 README.UPLOADER 
-> /pub/files/staff-docs/README.UPLOADER
drwxr-xr-x    2 0        0             512 Aug 23 17:26 dev
-rwxr-xr-x    1 0        0            1078 Apr  7  2006 favicon.ico
lrwxrwxrwx    1 0        0               1 Apr  8  2006 ftp -> .
lrwxrwxrwx    1 0        0              20 Mar 29  2006 incoming -> 
/.m/uploads/incoming
lrwxrwxrwx    1 0        0              16 Mar 23  2006 index -> 
/pub/files/index
drwxrwxr-x   45 108      42           1536 Mar 29  2006 pub
lrwxrwxrwx    1 0        0              35 Sep 19  2006 rfc -> 
/pub/mirrors/nic.nordu.net/in-notes
226-Options: -l
226 10 matches total
ftp>