Closed Bug 96727 Opened 24 years ago Closed 24 years ago

FTP doesn't appear to work from behind a firewall (works OK otherwise)

Categories

(Core Graveyard :: Networking: FTP, defect)

defect
Not set
major

Tracking

(Not tracked)

VERIFIED DUPLICATE of bug 99233

People

(Reporter: mozilla, Assigned: bbaetz)

References

Details

Attachments

(2 files)

[Sorry, I consider FTP not working to be pretty major - please change severity if you disagree...] I installed mozilla (latest non-CVS build) at home (linux) and it worked like a charm (love it!) I tried to install it at work today (both linux and WinNT) and http was working just fine, but as soon as I tried ftp (installing the java vm, in this case) FTP would connect, and then say Done without anything being displayed. I verified I could connect to the same ftp sire NO PROBLEM with other browsers and/or with ftp clients (ncftp). The logs on the ftp server show: ---------------- Aug 23 14:29:29 abort ftpd[11500]: USER anonymous Aug 23 14:29:29 abort ftpd[11500]: PASS mozilla@ Aug 23 14:29:29 abort ftpd[11500]: ANONYMOUS FTP LOGIN FROM my.host [my.ip], mozilla@ Aug 23 14:29:29 abort ftpd[11500]: SYST Aug 23 14:29:29 abort ftpd[11500]: TYPE Image Aug 23 14:29:29 abort ftpd[11500]: PASV Aug 23 14:29:30 abort ftpd[11500]: SIZE / Aug 23 14:29:30 abort ftpd[11500]: lost connection to my.host [my.ip] Aug 23 14:29:30 abort ftpd[11500]: FTP session closed ---------------- Not sure if this is some PASV issue or what, but.. well.. it sucks ;-) Let me know if you'd like other data (I have root on the ftp server in case you want some tcpdump output or something). -Taner
(oh, btw - the name of my ftp server is "abort" ;-)
More info -- I'm behind a Checkpoint FW-1 machine at work. I would expect PASV to work fine, tho (it obviously does w/ other clients ;-) -Taner
OK, did some tcpdumps with -ax and a big snaplen... looks like mozilla never sends anything "real" after PASV (and the Passive-mode ack by the server is received).. or.. at least.. it's a broken packet of some sort?
Hmm, yeah.. it (mozilla) seems to be sending a few zero-data-length packets to the ftp server, but immediately after it sends a packet with payload.. and then, out of nowhere, mozilla get a RST (that never shows up on the ftp server, itself) I see this: first 0-len then "PASV^M^J" (packet size was 6) server responds with "entering passive mode..." another 0-len then "SI" (and that's it - packet was of size '2') mozilla sees an RST out of nowhere (never sent by server) I can give you full tcpdump logs if you want. -Taner
I see only "<html><body></body></html>" as a page source when viewing ftp://ftp.linux.cz/ Netscape 4.7 and Explorer 5 however lists contents of the directory.
Sorry I forgot to tell the version of Mozilla and OS: I use Mozilla 0.9.3 and WinNT service pack 5. We have a firewall in our company.
WFM 2001082909 on Win2k (behind a NAT firewall). Reporter: Do you still see this bug using a more recent build? http://ftp.mozilla.org/pub/mozilla/nightly/latest/
Just tested it -- yep, same problem :-( -Taner
Okey-dokey. Marking NEW.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Firewalls often have transparent spoofing applications for FTP. lets move to packet analysis.
Let me get a fresh capture from both local and remote sides, and I will paste the tcpdumps here. -Taner
Attached file CLIENT-side log
Attached file SERVER-side log
Ok.. "abort.boom.net" is the ftp server "coredump.snv1.corp.loudcloud.com" is my desktop "olly.loudcloud.com" is the OUTSIDE interface of the FW-1 machine. -Taner
*** Bug 95281 has been marked as a duplicate of this bug. ***
reassigning to bbaetz@cs.mcgill.ca.
Assignee: dougt → bbaetz
Wierd. Do you have a debug mozilla build available?
Status: NEW → ASSIGNED
I do not.. -Reporter bug 95281
The RETR isn't being truncated; the /\r\n is just in a different packet. I'm going to mark this a dupe, and then we'll confirm it when the dupe is resolved. *** This bug has been marked as a duplicate of 99233 ***
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
VERIFIED: please open if not working for 1.0
Status: RESOLVED → VERIFIED
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: