653448 - Allow FTP connections to preproduction-stage.build.mozilla.org

Status: RESOLVED INVALID

(Infrastructure & Operations :: RelOps: General, task)

Description

[Rail Aliiev [:rail]]

This server is going to serve preproduction builds via FTP. Could you please unblock FTP protocol in firewall? At the moment connections are being refused by the server and there is no local firewall set on the machine.

Comment 1

[Zandr Milewski [:zandr]]

You want ftp access from the world as a whole to preproduction-stage.b.m.o?

Short answer is 'no'. 

Long answer is we can do a security review on that host, or more likely, find a way to move files onto ftp.m.o or a similar host that is already exposed to the world.

Comment 2

[Rail Aliiev [:rail]]

(In reply to comment #1)
> You want ftp access from the world as a whole to preproduction-stage.b.m.o?

I should have been more verbose, sorry. FTP access from build-vpn would be quite enough. Does this require security overview?

Comment 3

[Zandr Milewski [:zandr]]

No, internal use is fine.

There shouldn't be any access restrictions from the build-vpn concentrator to that machine. nmapping that machine shows ports 20 and 21 to be closed, which makes me think it's not running an ftp daemon at all.

I can't log in to the host to look, however.

Comment 4

[Rail Aliiev [:rail]]

My fault, a typo in hostname while trying to access the host. :/ I also stopped vsftpd after trying to access it. Works as expected. Sorry for the noise.