configure ftp access on the HP-UX 11i

[v_chandr]

How could I configure the ftp access on my HP-UX 11i ?
In my environment,my HP server is not located at the DMZ zone. I have to enable FTP to another location in US from my HP server.
I can ping the ip in US, but can't ftp to that server.
However ,I can do a ftp from my proxy server to US and it return successful.
I was advised to add the ip of the proxy server to my HP server to enable ftp. How can i do this on a HP-UX 11i box ? pls help..
Thank you :-)

[Arunvijai_4 · Accepted solution]

Hi,

Take a look at these threads,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=946702
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=956562

-Arun

[Muthukumar_5]

Add the proxy server ip-address and hostname into /etc/hosts file. Try it now.

--
Muthu

[Muthukumar_5]

Add the proxy server ip-address and hostname into /etc/hosts file in hp 11i box. Try it now.

--
Muthu

[Sivakumar TS]

Hi,

Check with the Network/security team and ensure that the port are opened in firewal for ftp access for this server.

Regards,

Siva

[v_chandr]

Hi Muthu,

I've added the proxy ip address in the /etc/hosts file

Still got a connection refused , if i do a ftp from my HP server.
FYI , the network team has already grant access in the firewall. We have no problem accessing from our proxy server to the destination ip in US.

pls advice.... :-)

attached is a copy of /etc/hosts for ur ref :
#
127.0.0.1 localhost loopback
xx.xx.xx.xx kjfpffux
xx.xx.xx.xx szfpffux
xx.xx.xx.xx kjfpfflx
xx.xx.xx.xx szfpfflx
yy.yy.yy.yy US ip
zz.zz.zz.zz proxy ip
"/etc/hosts" 24 lines, 756 characters

[Arunvijai_4]

Hello,

I've added the proxy ip address in the /etc/hosts file

Still got a connection refused , if i do a ftp from my HP server.
FYI , the network team has already grant access in the firewall. We have no problem accessing from our proxy server to the destination ip in US.

Have you gone through the threads i have sent ? Also, Which proxy server you are using to test these things up ?


-Arun

[Muthukumar_5]

May be from US Machine, the ftp access from local machine is denied.

You may follow the method as,

From proxy server get the files from US Server. Then locally ftp the same files from proxy server to local machine.

--
Muthu

[v_chandr]

Hi Arun,
Yes, I have gone thru the threds u've sent

but....i still get a connection refused

FYI, i can do a ftp from my proxy server to US. plesae advise

[Muthukumar_5]

You will get "connection refused" message when ftp server is blocking ftp connection from ftp client. So US machine is allowed to get ftp request from proxy server but not the local machine. Firewall restriction in us machine side is making the problem.

--
Muthu

[Arunvijai_4]

Hello,

Can you ping to US machine from your local box ? This helps you to narrow down the problem further. Which proxy server you are using ?

-Arun

[v_chandr]

Hi Muthu,
please be informed that the ftp cronjob have to be created on HP server, in order to facilitate continuous ftp download at all time. This files will then be used for certain processing.In this scenario, we could not afford to do the ftp manually back and forth from the proxy server to HP server....

Pls advise.... :-)

[Arunvijai_4]

Hello,

I strongly suspect, you have problem with your proxy or firewall settings. The reason is, you are able to access ftp service from your proxy server. May be iptables turned on. Check every possible option on your proxy, FTP server and firewall.

-Arun

[v_chandr]

Hi all,

I can ping the US server and do a nslookup to the US server from my local HP machine, but cant do a ftp...

My proxy server is a sun solaris server.

The proxy server is in a free zone, in which it is allowed to connect ouside of my company network.My HP machine is in the resticted zone, which does not allow outside connection...

please advise.. :-)

[Asif Sharif]

I agree with Aurn. Problem seems in proxy or in firewall.

Regards,
Asif Sharif

[Sivakumar TS]

Hi Chandr,

Just by adding proxy server IP in hosts file, the ftp request wont go thru the proxy.

As you able to ping the US server from HPUX server, i think the connectivity is OK.

Since the server is in DMZ, there may be some rules configured for this server,

check the ftp ports are allowed from and to the HPUX server as i mentioned earlier.

also, it is possible to see the packet activity, like packer drop etc in firewall. which will help you to proceed further on this.

Regards,

Siva.

[Yogeeraj_1]

hi,

you must test the route from your HP server to the outside.

if OK, then we can continue with further troubleshooting.


kind regards
yogeeraj

[v_chandr]

Hi all,

According to the network team, the HP server is by passing the proxy. Please advise.

[Sivakumar TS]

Just by adding proxy server IP in hosts file, the ftp request wont go thru the proxy.

Regards,

Siva

[Yogeeraj_1]

hi,

you can try to add a route to the the specified host or network route to the network routing table.

see man route.

kind regards
yogeeraj

[Sivakumar TS]

Hi Chandar,

Hope your problem would get resolved after checking firewall settings.

If you still want to configure proxy,

you may login thri CDE and add proxy IP thou browser,

or you can try #proxy command which i havent tried, but Requires Optional LAN/X.25 Software

Regards,

Siva.

[Arunvijai_4]

Hello,

Are you sure you are using a proxy that supports "ftp" protocol ? Double check with network team as you said
According to the network team, the HP server is by passing the proxy. Please advise.

-Arun

[Sivakumar TS]

The nework team in RIGHT !

because we have not yet configured proxy properly, so that the ftp requests from HPUX server goes thru the proxy.

Instead it would have been directly from HPUX to US server.

Regards,

Siva.

[Subramaniyan.S]

Hi,

You may try withh the following.

Usually it works with linux.

export http_proxy http://proxy-server:port

export ftp_proxy http://proxy-server:port

export gopher_proxy http://proxy-server:port

checkout the below link,

http://www.lnf.infn.it/computing/unix/www/unix.html

regards,

Subbu.

[Subramaniyan.S]

Hi,

As earlier siva said, if you can login through CDE, you may give the proxy entry using Navigator.

Usually, Navigator stores proxy information in a preference file under the user profile directory on the local machine. (Java Plug-in and Java Web Start read and parse this file to obtain the proxy information.)

you may check it out.

Subbu.