I just deployed a hastily built Slackware 9.1 gateway and mail server
for a new client. In my haste, I did a menu based install, and
installed pretty much everything I thought I would need. I did leave
out many libraries (mostly glib and glib2, gtk+, etc.) mostly related
to X. In my haste, I did not copy over the /slackware directory from
the install CD like I usually do.

FTP clients aren't functioning properly. I am able to use ftp and ncftp
to connect to an ftp server, but I am unable to download or list any of
the files. Here is a typical scenario:

root@mail:/var/log/packages# ftp ftp.lizella.net
Connected to lizella.net.
220 barnowl.lizella.net FTP server (Version 6.00LS) ready.
Name (ftp.lizella.net:root): alan
331 Password required for alan.
Password:
230 User alan logged in, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
200 PORT command successful.
425 Can't build data connection: Connection refused.
ftp>

root@mail:/var/log/packages# ncftp -u alan lizella.net
NcFTP 3.1.6 (Aug 25, 2003) by Mike Gleason
(http://www.NcFTP.com/contact/).
Connecting to 12.47.129.231..
barnowl.lizella.net FTP server (Version 6.00LS) ready.
Logging in...
Password requested by 12.47.129.231 for user "alan".

Password required for alan.

Password: **********************************************

User alan logged in, access restrictions apply.
Logged in to lizella.net.
ncftp / > ls
List failed.
ncftp / >

I suspect that I left some package out of the l or n series. A google
search hasn't brought anything to light though. Does anyone know which
package I am missing?

It should be noted that this is the only machine that has this trouble
connecting to my FTP server. Other Slackware 9.1 machines using ftp and
ncftp are able to connect and function without trouble.

--
It is better to hear the rebuke of the wise,
Than for a man to hear the song of fools.
Ecclesiastes 7:5

On 7 Nov 2003 08:46:02 -0600,
Alan Hicks <1001298936@carrier.lizella.net> wrote:
>
> I suspect that I left some package out of the l or n series. A google
> search hasn't brought anything to light though. Does anyone know which
> package I am missing?

Maybe doing an ldd on your ftp server binary would help?

--
Mark Hill <usenet@mark.ukfsn.org> (Yahoo address not read)
GPG KeyID: 4A3B58AC

On 7 Nov 2003 08:46:02 -0600, Alan Hicks <1001298936@carrier.lizella.net> wrote:
> ftp> ls
> 200 PORT command successful.
> 425 Can't build data connection: Connection refused.

If you've got netfilter configured, do you have the FTP connection
tracking module loaded? Do you have a rule to allow "RELATED"
connections back? That error message means that the server can't
connect back to your machine to establish a data connection.


--
Simon <simon@no-dns-yet.org.uk> **** GPG: F4A23C69
"We demand rigidly defined areas of doubt and uncertainty."
- Douglas Adams

Alan Hicks <1001298936@carrier.lizella.net> wrote:

>I just deployed a hastily built Slackware 9.1 gateway and mail server
>for a new client. In my haste, I did a menu based install, and
>installed pretty much everything I thought I would need. I did leave
>out many libraries (mostly glib and glib2, gtk+, etc.) mostly related
>to X. In my haste, I did not copy over the /slackware directory from
>the install CD like I usually do.
>
>FTP clients aren't functioning properly. I am able to use ftp and ncftp
>to connect to an ftp server, but I am unable to download or list any of
>the files. Here is a typical scenario:
>
>root@mail:/var/log/packages# ftp ftp.lizella.net
>Connected to lizella.net.
>220 barnowl.lizella.net FTP server (Version 6.00LS) ready.
>Name (ftp.lizella.net:root): alan
>331 Password required for alan.
>Password:
>230 User alan logged in, access restrictions apply.
>Remote system type is UNIX.
>Using binary mode to transfer files.
>ftp> ls
>200 PORT command successful.
>425 Can't build data connection: Connection refused.
>ftp>
>
>root@mail:/var/log/packages# ncftp -u alan lizella.net
>NcFTP 3.1.6 (Aug 25, 2003) by Mike Gleason
>(http://www.NcFTP.com/contact/).
>Connecting to 12.47.129.231..
>barnowl.lizella.net FTP server (Version 6.00LS) ready.
>Logging in...
>Password requested by 12.47.129.231 for user "alan".
>
> Password required for alan.
>
>Password: **********************************************
>
>User alan logged in, access restrictions apply.
>Logged in to lizella.net.
>ncftp / > ls
>List failed.
>ncftp / >
>
>I suspect that I left some package out of the l or n series. A google
>search hasn't brought anything to light though. Does anyone know which
>package I am missing?
>
>It should be noted that this is the only machine that has this trouble
>connecting to my FTP server. Other Slackware 9.1 machines using ftp and
>ncftp are able to connect and function without trouble.

Is it possible you are accessing through a firewall which doesn't have
both ftp ports (20 and 21) activated? You could try starting up your
ftp client in passive mode and see if that resolves the issue.

--
------------------------------------------------
http://www3.sympatico.ca/dmitton
SPAM Reduction: Remove "x." from my domain.
------------------------------------------------

In alt.os.linux.slackware, Mark Hill dared to utter,
> Maybe doing an ldd on your ftp server binary would help?

Tried that and it didn't mention anything that wasn't present.

--
It is better to hear the rebuke of the wise,
Than for a man to hear the song of fools.
Ecclesiastes 7:5

In alt.os.linux.slackware, Simon dared to utter,
> If you've got netfilter configured, do you have the FTP connection
> tracking module loaded? Do you have a rule to allow "RELATED"
> connections back? That error message means that the server can't
> connect back to your machine to establish a data connection.

I considered this as well and ruled it out. The firewall I'm running is
exactly identical to another one I'm using without this problem. Also,
my laptop which was NATed by this gateway had absolutely no troubles,
which leads me away from thinking it is a firewall issue. I've tried
both PORT and passive modes.

--
It is better to hear the rebuke of the wise,
Than for a man to hear the song of fools.
Ecclesiastes 7:5

In news:slrnbqnbvp.10j.1001298936@carrier.lizella.net ,
Alan Hicks <1001298936@carrier.lizella.net> rambled:

>
> I suspect that I left some package out of the l or n series. A google
> search hasn't brought anything to light though. Does anyone know which
> package I am missing?
>
> It should be noted that this is the only machine that has this trouble
> connecting to my FTP server. Other Slackware 9.1 machines using ftp
> and ncftp are able to connect and function without trouble.

Tried diff on /var/log/packages to see if anything jumps out ?

--
Billy

"Pinky, are you pondering what I'm pondering?"
I think so, Brain, but if they called them "Sad Meals", kids wouldn't
buy them!

In article <slrnbqni9j.146.1001298936@carrier.lizella.net>,
Alan Hicks wrote:
>> If you've got netfilter configured, do you have the FTP connection
>> tracking module loaded? Do you have a rule to allow "RELATED"

How about "modprobe ip_nat_ftp"?

> I considered this as well and ruled it out. The firewall I'm running is
> exactly identical to another one I'm using without this problem. Also,

Was that module loaded?

> my laptop which was NATed by this gateway had absolutely no troubles,

The laptop running Slackintosh, or OS X? I can imagine that the OS X
clients might transparently use passive FTP.
--
/dev/rob0 - preferred_email=i$((28*28+28))@softhome.net
or put "not-spam" or "/dev/rob0" in Subject header to reply

>> connections back? That error message means that the server can't
>> connect back to your machine to establish a data connection.
>
> I considered this as well and ruled it out. The firewall I'm running is
> exactly identical to another one I'm using without this problem. Also,
> my laptop which was NATed by this gateway had absolutely no troubles,
> which leads me away from thinking it is a firewall issue. I've tried
> both PORT and passive modes.

Well you'll have to reconsider this. The error message you've mentioned is
exactly what happens when a firewall blocks the data socket for FTP.

Its higly unlikely that ncftp for ex. depends on some other packages except
glibc... So double check your firewall setup on that computer itself. Or
try with a flushed iptables rules and report what happens...
Also try to sniff with tcpdump to see what happens...


--
Дамјан (jabberID:damjan@bagra.net.mk)

Weird enough for government work.

On Fri, 07 Nov 2003 10:33:22 -0600, Alan Hicks wrote:

> In alt.os.linux.slackware, Simon dared to utter,
>> If you've got netfilter configured, do you have the FTP connection
>> tracking module loaded? Do you have a rule to allow "RELATED"
>> connections back? That error message means that the server can't
>> connect back to your machine to establish a data connection.
>
> I considered this as well and ruled it out. The firewall I'm running is
> exactly identical to another one I'm using without this problem. Also,
> my laptop which was NATed by this gateway had absolutely no troubles,
> which leads me away from thinking it is a firewall issue. I've tried
> both PORT and passive modes.

Hm, I wouldn't be so fast to rule that out. Perhaps your kernel lacks a
needed module (one which exists on the other system running the same
firewall). And IIRC there's a nat_ftp module (which perhaps doesn't apply
to you, since you don't NAT yourself), that makes it work for the laptop.

Though it's odd that it doesn't work in passive mode, I'll give that to
you.

Just my 2 cents.

--
Erik L
erik@metalab.unc.edu
Sweden