Closed
Bug 96727
Opened 24 years ago
Closed 24 years ago
FTP doesn't appear to work from behind a firewall (works OK otherwise)
Categories
(Core Graveyard :: Networking: FTP, defect)
Core Graveyard
Networking: FTP
Tracking
(Not tracked)
People
(Reporter: mozilla, Assigned: bbaetz)
References
Details
Attachments
(2 files)
[Sorry, I consider FTP not working to be pretty major - please change severity
if you disagree...]
I installed mozilla (latest non-CVS build) at home (linux) and it worked like a
charm (love it!)
I tried to install it at work today (both linux and WinNT) and http was working
just fine, but as soon as I tried ftp (installing the java vm, in this case) FTP
would connect, and then say Done without anything being displayed.
I verified I could connect to the same ftp sire NO PROBLEM with other browsers
and/or with ftp clients (ncftp).
The logs on the ftp server show:
----------------
Aug 23 14:29:29 abort ftpd[11500]: USER anonymous
Aug 23 14:29:29 abort ftpd[11500]: PASS mozilla@
Aug 23 14:29:29 abort ftpd[11500]: ANONYMOUS FTP LOGIN FROM my.host [my.ip],
mozilla@
Aug 23 14:29:29 abort ftpd[11500]: SYST
Aug 23 14:29:29 abort ftpd[11500]: TYPE Image
Aug 23 14:29:29 abort ftpd[11500]: PASV
Aug 23 14:29:30 abort ftpd[11500]: SIZE /
Aug 23 14:29:30 abort ftpd[11500]: lost connection to my.host [my.ip]
Aug 23 14:29:30 abort ftpd[11500]: FTP session closed
----------------
Not sure if this is some PASV issue or what, but.. well.. it sucks ;-)
Let me know if you'd like other data (I have root on the ftp server in case you
want some tcpdump output or something).
-Taner
| Reporter | ||
Comment 1•24 years ago
|
||
(oh, btw - the name of my ftp server is "abort" ;-)
| Reporter | ||
Comment 2•24 years ago
|
||
More info -- I'm behind a Checkpoint FW-1 machine at work. I would expect PASV
to work fine, tho (it obviously does w/ other clients ;-)
-Taner
| Reporter | ||
Comment 3•24 years ago
|
||
OK, did some tcpdumps with -ax and a big snaplen...
looks like mozilla never sends anything "real" after PASV (and the Passive-mode
ack by the server is received).. or.. at least.. it's a broken packet of some sort?
| Reporter | ||
Comment 4•24 years ago
|
||
Hmm, yeah.. it (mozilla) seems to be sending a few zero-data-length packets to
the ftp server, but immediately after it sends a packet with payload.. and then,
out of nowhere, mozilla get a RST (that never shows up on the ftp server, itself)
I see this:
first 0-len
then "PASV^M^J" (packet size was 6)
server responds with "entering passive mode..."
another 0-len
then "SI" (and that's it - packet was of size '2')
mozilla sees an RST out of nowhere (never sent by server)
I can give you full tcpdump logs if you want.
-Taner
Comment 5•24 years ago
|
||
I see only "<html><body></body></html>" as a page source when viewing
ftp://ftp.linux.cz/
Netscape 4.7 and Explorer 5 however lists contents of the directory.
Comment 6•24 years ago
|
||
Sorry I forgot to tell the version of Mozilla and OS:
I use Mozilla 0.9.3 and WinNT service pack 5. We have a firewall in our company.
Comment 7•24 years ago
|
||
WFM 2001082909 on Win2k (behind a NAT firewall).
Reporter: Do you still see this bug using a more recent build?
http://ftp.mozilla.org/pub/mozilla/nightly/latest/
| Reporter | ||
Comment 8•24 years ago
|
||
Just tested it -- yep, same problem :-(
-Taner
Comment 10•24 years ago
|
||
Firewalls often have transparent spoofing applications for FTP.
lets move to packet analysis.
| Reporter | ||
Comment 11•24 years ago
|
||
Let me get a fresh capture from both local and remote sides, and I will paste
the tcpdumps here.
-Taner
| Reporter | ||
Comment 12•24 years ago
|
||
| Reporter | ||
Comment 13•24 years ago
|
||
| Reporter | ||
Comment 14•24 years ago
|
||
Ok..
"abort.boom.net" is the ftp server
"coredump.snv1.corp.loudcloud.com" is my desktop
"olly.loudcloud.com" is the OUTSIDE interface of the FW-1 machine.
-Taner
Comment 15•24 years ago
|
||
*** Bug 95281 has been marked as a duplicate of this bug. ***
| Assignee | ||
Comment 17•24 years ago
|
||
Wierd.
Do you have a debug mozilla build available?
Status: NEW → ASSIGNED
Comment 18•24 years ago
|
||
I do not..
-Reporter bug 95281
| Assignee | ||
Comment 19•24 years ago
|
||
The RETR isn't being truncated; the /\r\n is just in a different packet. I'm
going to mark this a dupe, and then we'll confirm it when the dupe is resolved.
*** This bug has been marked as a duplicate of 99233 ***
Status: ASSIGNED → RESOLVED
Closed: 24 years ago
Resolution: --- → DUPLICATE
Updated•2 years ago
|
Product: Core → Core Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•