FTP Server in passive

[Alessio_6]

Hello,

can I force an HPUX 11.00 FTP Server to use passive mode for all the connections?
I really cannot find such a option. We are experiencing many problems for a connection trough 3 firewalls/nat.

Thanks for your support.

Alessio

[Christopher Caldwell]

In ftpaccess (man ftpaccess) look for the sections relating to passive.

Here's a couple of snippets:
passive address

Allows control of the address reported in response to
a PASV command. When any control connection matching
the requests a passive data connection (PASV),
the address is reported. NOTE: this
does not change the address the daemone actually lis??
tens on, only the address reported to the client.
This feature allows the daemon to operate correctly
behind IP-renumbering firewalls.

For example:
passive address 10.0.1.15 10.0.0.0/8
passive address 192.168.1.5 0.0.0.0/0
Clients connecting from the class-A network 10 will
be told the passive connection is listening on IP-
address 10.0.1.15 while all others will be told the
connection is listening on 192.168.1.5

Multiple passive addresses may be specified to handle
complex, or multi-gatewayed, networks.


passive ports

Allows control of the TCP port numbers which may be
used for a passive data connection. If the control
connection matches the a port in the range
to will be randomly selected for the dae??
mon to listen on. This feature allows firewalls to
limit the ports which remote clients may use to con??
nect into the protected network.

is shorthand for an IP address in dotted-quad
notation followed by a slash and the number of left-
most bits which represent the network address (as
opposed to the machine address). For example, if
you're using the reserved class-A network 10, instead
of a netmask of 255.0.0.0 use a CIDR of /8 as in
10.0.0.0/8 to represent your network.

[connie miller_1]

firewalls are a big problem and your going to have to do a little work around it job here but oneway that i found is the answer to my prayers and simple to a first timer on firewalls. when your accessing a site you will see this very small circular red or orange icon on the web page itself that has the tiny icon inside the icon your seeing right click on it and allow access unlock it the firewall or block will allow you to bypass these irritatting blocks

[Ross Zubritski]

Yes, you can. type pasv or passive at the ftp prompt.

Regards,

RZ

[Ross Zubritski]

Connie,

May I ask what you are talking about? This is the HP-Ux forum.

Regards,

RZ

[Ron Kinner]

Ross,

I'm beginning to think Connie is a computer program posting randomly. She has several other "answers" which make absolutely no sense. All I can figure out about her is that she likes DSL and her phone company.

Ron