Unix to VMS passive FTP

[Michael Purdy]

We have just upgraded one of two systems which are a master/standby pair. the 7.2-1 vms systems receives files from a unix box via passive FTP, no problem there, the 7.3-2 vms system now gives a "Disallowing data connection for 10.xx.xx.xx" message and the transfer fails. The readme file for TCPIP 5.4 mentions possibly using logicals to get round this, but has anyone else seen this behaviour?
regards
Mike

[Ian Miller.]

which logical are you thinking of ?
http://h71000.www7.hp.com/doc/732final/6526/6526pro_036.html#ftp_logicals_tab

[Michael Purdy]

Hallo,
I was looking at tcpip$ftp_allow_port_redirect
TCPIP$FTP_ALLOW_PORT_REDIRECT

Just tried defineing /sys /exec xxx "TRUE"

As the release notes do not give an example, I´m assumig true is correct?

[Andy Bustamante]

We saw an issue FTP issue with FTP data connections after this upgrade (to TCPIP 5.4).

Earlier versions of TCPIP would accept connections where the source port was something other than port 20. This behavior was caused by firewalls rewriting the source port. Prior to TCPIP 5.4 this didn't matter, if the connection made it through the firewall, ftp data was accepted.

Is there a firewall between the systems? You can check that the ftp data connection is originating on port 20 with TCPTRACE.

[Michael Purdy]

HI,

Defining the 4 "allow" logicals has fixed the problem, but I will try the tcptrace. Security isn´t a risk here but I would like to understand the implications further. Thanks for your input.