I setup an ftp server in our lan,
i was quit happy, it works... (with the help of many of you, obviously!), the server is initially tested as 10.41.1.6
After all good results, i try to make it public for testing access but now it fail connecting. It pings, it reachs the server, but then i can't see any content.
Anything obvious?
My static ip 10.41.1.6 is a redirected from the public address 206.162.143.66 as it pass our firewall.
How would you troubleshoot the problem?

pouxmaster seems ok if the request is from outside.

Sometimes a ftp server isn't working well because it can not resolve the domain name. This occures in either ip ftp or domain ftp. Try to use alternative DNS.

Doris

I've set one up on my home machine....


It's really cool to be here in the office and have network access to all of my files on the home server. From W2K it acts just like a network drive....only it's at my house......and safe for me to save stuff.....and I don't have to worry about collecting all of my files during those frantic 5 min. after they lay you off.....


Are you doing annonymous login, guest or real?

You mentioned that your static address is inside (the firewall), and that the 206.162.143.66 number is the outside number. Am I understanding correct?

I have something similar, ATT service comes to house (dynamic address) and gets redirected by router/firewall to 192.168.0.10 (this is static although all other computers in house are dynamic).

You mentioned that you can ping the machine, is this from inside or from the outside? Can you verify that packets are actually making it from outside your firewall through the router and to your server? I'd use something like tcpdump to watch for packet activity on the server. Start that going and try hitting the ftp server from outside. I think that the port 21/23 packets will show up even if the daemon is not running. This should tell us if it's a "transport" problem or a server problem. Another thing to check is on the router. Is this a simple "home" router, or something big like a Cisco 2500. My home unit came with all of the filtering enabled. I had to disable the filtering as well as set up the redirects. This took some fiddling, but it's important to look at those filter rules. I also used "safeweb" to redirect my home query's back at my site...that way the router didn't get the "outside" addresses confused with the "inside" addresses. Since they went off the air, I simply tweek one thing per day and check it from the office.

If the packets from the outside are getting to the server, but are not getting answered/getting flushed, is the ftp server daemon running? I think you should be able to access the ftp server through the loopback, though I'm not sure, it just seems like a logical extension of the loopback function.

Another thing that seems to prevent proper function is proxy servers. My wife's work has one which prevents her from connecting. I can get right through because my work doesn't have one......

If you are dealing with the inept help people at either ATT/USWEST/QWEST and all of the other MSN lackies/flying-monkeys, they arn't too much help getting these things resolved.....I'd recommend the best possible book that I've found......"TCP/IP Illustrated, Vol. 1".....I think it's an Addison-Wesley book. It's also best to have that in hand when dealing with the above mentioned flacks, just keep repeating your question over and over, ignoring their comments about "what does it say in your XXXX window?".......sorry, flashback :-(

Post back, and I'll keep trying to help.....

Danny

Hi Danny,
i will try what you said howthow as Doris mentioned she could hit my server (don't forget that it's a public address).
For myself, if i use ftp program, i connect (well, it looks like it) but i don't see any content... It's the same with a browser. I will check the rights this morning. There should be an anonymous folder that can be accessed by the so called. There are folders in anonymous...
there is an guest folder and a user folder that as folders in, too.
By the way, i supposed that it is not permited to access server as root user?
So, if you can access it, tell me how?
Doris, how could you tell that the server name was pouxmaster?

Dan

Hey,


Good to hear back from you, after I posted, I saw how old the thread was and thought this may be dead.....please note that my experience is on RH7.1, your milage may vary


anyway, I have mine setup as 'guest' login. From my understanding, this means that each guest must have a real account on the system, but they are not granted the same level of access as people who are really logged in (think X windows remote or rlogin or actually at the terminal).

Yeah, there should be a directory for annonymous logins too though. The path to the 'document root' for people logging in is set in the ftpaccess.conf file. I think the default settings are: annonymous goes to generic annonymous path, real users/guest users go to their respective home directories. Kinda similar to the was Samba works with the stock configuration.

Another thing that I discovered about wu-ftp is the ability to control what commands are accessable to the user. I havn't quite figured out the association between ftpaccess.conf and the installation of links in the ~/ftp/bin directory (in the annonymous path) to the real commands which are located in /sbin/.....

More later,

Danny

Hi, are you still working on the ftp server?

Your server is working normally as I said before.
I could ftp to your site and see your directory content, as anonymous user. You may check your system log to verify it (from 134.???.???.???).

If pouxmaster is your problematic machine, then I would say your problem is only the intra-net ftp connections. If pouxmaster is the router (not your ftp server), then the ip forward isn't configured correctly.

I had the same problem. The intranet ftp is timed out but the internet ftp is ok. It turned to be DNS server problem. On this board, some people suggested to remark entries in /etc/resolv.conf.

Doris