2012/5/15 Mitry Matyushkov ftp@mgts.by:

Hi Karol,

On 5/15/2012 1:36 AM, Karol Chmurzyński wrote:

...

ftp://mirror.chmuri.net/archmirror/     ftp     Poland  0.0%    unknown               ∞

Please tell me were is problem with ftp server? Firewall is off everything its ok and on the list its a problem within.

Your ftp server does not support passive mode:

$ wget -S -T 10 ftp://mirror.chmuri.net/archmirror/lastsync --2012-05-15 03:51:35--  ftp://mirror.chmuri.net/archmirror/lastsync           => `lastsync' Resolving mirror.chmuri.net... 188.116.52.91 Connecting to mirror.chmuri.net|188.116.52.91|:21... connected. Logging in as anonymous ... 220 FTP Server ready. --> USER anonymous

331 Anonymous login ok, send your complete email address as your password --> PASS Turtle Power!

230 Anonymous login ok, restrictions apply. --> SYST

215 UNIX Type: L8 --> PWD

257 "/" is the current directory --> TYPE I

200 Type set to I --> CWD /archmirror

250 CWD command successful --> SIZE lastsync

213 11 --> PASV

Error in server response, closing control connection. Retrying.

Meanwhile, PORT mode works fine.

Regards, Mitry _______________________________________________ arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

http://wklej.to/vD71q password for lock is archmirror please look at config for my proftpd.conf

2012/5/15 Mitry Matyushkov ftp@mgts.by:

Hi Karol,

Is your mirror host behind another box with firewall/nat? If this is the case please follow http://www.proftpd.org/docs/howto/NAT.html.

Otherwise it looks like you filter port range you set in proftpd.conf PassivePorts 49152 65534

You have to allow connections to these ports.

Mitry.

On 5/15/2012 12:59 PM, Karol Chmurzyński wrote:

...

http://wklej.to/vD71q password for lock is archmirror please look at config for my proftpd.conf

---

arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

Its a xen wirtalization witch one single ip adress, and its not behind a NAT,firwall its off and i dont know what is the problem witch this. System is centos 6 , in the past it was on arch and there are no problem witch in.

2012/5/15 Andrew Holland Andrew.holland@academica.fi:

Check that syslinux is not blocking something. Centos6 defaults syslinux 'on' in all cases I have seen.

On May 15, 2012, at 13:26, "Karol Chmurzyński" chmuri@gmail.com wrote:

...

2012/5/15 Mitry Matyushkov ftp@mgts.by:

...

Hi Karol,

Is your mirror host behind another box with firewall/nat? If this is the case please follow http://www.proftpd.org/docs/howto/NAT.html.

Otherwise it looks like you filter port range you set in proftpd.conf PassivePorts 49152 65534

You have to allow connections to these ports.

Mitry.

On 5/15/2012 12:59 PM, Karol Chmurzyński wrote:

...

http://wklej.to/vD71q password for lock is archmirror please look at config for my proftpd.conf

---

arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

Its a xen wirtalization witch one single ip adress, and its not behind a NAT,firwall its off and i dont know what is the problem witch this. System is centos 6 , in the past it was on arch and there are no problem witch in.

-- Pozdrawiam Karol Chmurzyński _______________________________________________ arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

---

arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

Selinux is disabled. No NAT no firwall nothing just a pure proftpd config nothing else.

2012/5/15 Andrew Holland Andrew.holland@academica.fi:

Ok - well, to debug further, I would suggest doing some tests on the server side (to find out if it's seeing packets to those ports)

I'd test some ports via netcat - i.e. on the server:  nc -l -p 49152  /  on client machine:  nc [ip of ftp server] 49152 If it can connect, and you can write/read on both sides, try other ports in that range (49152 to 65534.)

If they are BLOCKED, you've got a firewall in the way (probably external to your xen domU.)

I'd also look at the server logs and see if there's something there, just in case.

It probably won't help much, but - my mirror is hosted on CentOS as well (not my decision) and we are using vsftpd.

---

From: arch-mirrors-bounces@archlinux.org [arch-mirrors-bounces@archlinux.org] on behalf of Karol Chmurzyński [chmuri@gmail.com] Sent: Tuesday, May 15, 2012 13:41 To: Arch Linux Mirroring Discussion and Announcements Subject: Re: [arch-mirrors] FTP strange problem

[removed quoted stuff]

Selinux is disabled. No NAT no firwall nothing just a pure proftpd config nothing else.

-- Pozdrawiam Karol Chmurzyński _______________________________________________ arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors _______________________________________________ arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

Ok i have changed to the vsftp that i have on arch in the past witch this simple config cat /etc/vsftpd/vsftpd.conf ftpd_banner=Welcome offical chmuri mirror. # Sample anonymous FTP server configuration # # Mandatory directives # listen=YES local_enable=NO anonymous_enable=YES write_enable=NO anon_root=/usr/mirror/ # # Optional directives # xferlog_enable=YES listen_port=21

2012/5/15 Mitry Matyushkov ftp@mgts.by:

Karol,

The same issue with vsftpd. Can you please show `ip addr' output?

On 5/15/2012 2:52 PM, Karol Chmurzyński wrote:

...

Ok i have changed to the vsftp that i have on arch in the past witch this simple config cat /etc/vsftpd/vsftpd.conf ftpd_banner=Welcome offical chmuri mirror. # Sample anonymous FTP server configuration # # Mandatory directives # listen=YES local_enable=NO anonymous_enable=YES write_enable=NO anon_root=/usr/mirror/ # # Optional directives # xferlog_enable=YES listen_port=21

---

arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:16:3e:9c:de:40 brd ff:ff:ff:ff:ff:ff inet 188.116.52.91/24 brd 188.116.52.255 scope global eth0 inet6 fe80::216:3eff:fe9c:de40/64 scope link valid_lft forever preferred_lft forever

2012/5/15 Mitry Matyushkov ftp@mgts.by:

Hi,

This issue is very similar to https://bugzilla.redhat.com/show_bug.cgi?id=642388

Regards, Mitry

On 5/15/2012 7:32 PM, Karol Chmurzyński wrote:

...

ip addr 1: lo:<LOOPBACK,UP,LOWER_UP>  mtu 16436 qdisc noqueue state UNKNOWN     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00     inet 127.0.0.1/8 scope host lo     inet6 ::1/128 scope host        valid_lft forever preferred_lft forever 2: eth0:<BROADCAST,MULTICAST,UP,LOWER_UP>  mtu 1500 qdisc pfifo_fast state UP qlen 1000     link/ether 00:16:3e:9c:de:40 brd ff:ff:ff:ff:ff:ff     inet 188.116.52.91/24 brd 188.116.52.255 scope global eth0     inet6 fe80::216:3eff:fe9c:de40/64 scope link        valid_lft forever preferred_lft forever

---

arch-mirrors mailing list arch-mirrors@archlinux.org http://mailman.archlinux.org/mailman/listinfo/arch-mirrors

Ok ive changed system to debian 6 x64 added one more IP 188.116.56.222 and the problem is the same. ( iptables are flushed)