Firewall Wizards mailing list archives

Re: Anybody have a clue why...


From: "Steven M. Bellovin" <smb () research att com>
Date: Thu, 03 Jun 1999 07:42:21 -0400

In message <3755B00E.C9D985C4 () 2access com>, Will Kempf writes:

...passive ftp won't work from command line through Firewall-1? 

Windows clients such as WS_FTP and Netscape work just fine when set to
passive mode. When I do a "quote PASV" in a command line ftp session (Unix
or Windows command line clients), the server says its entering passive mode,
but a list or file transfer in either direction just hangs.

A client has to behave differently in passive mode; simply telling the
server to do so is futile, since then both parties are waiting for the
other to connect.

Some ftp clients, including some of the open source ones, have a 'passive'
command that does the right thing.  If your vendor's ftp command doesn't
support this, port one of the others.




Current thread: