FTP Strange Problem

[GerGon]

Hi Gurus, I got a ftp problem, I read a lot threads but can solve my case.

We have HP ux v.11, called caribe, time ago I can use ftp without problem, but now I can not, the only thing that has been change is the DNS. All seen to be right...!!!

I get error:
From DOS: Connection closed by remote host.
From HP box: 421 Service not available, remote server has closed connection

Here show you some important files for your reference:
[root@caribe]/etc> tail -n 5 /var/adm/inetd.sec
# Hosts and network names must be official names, not aliases.
# See the inetd.sec(4) manual page for more information.
dtspc allow 127.0.0.1 loopback caribe
ftp allow 10.58.0.0 ahost anetwork
ftp allow 10.58.0.182
[root@caribe]/etc>

*********************
[root@caribe]/etc> tail /var/adm/syslog/syslog.log
Apr 28 14:20:22 caribe inetd[618]: Rereading configuration
Apr 28 14:20:22 caribe inetd[618]: protocol = tcp
Apr 28 14:20:22 caribe inetd[618]: protocol = udp
Apr 28 14:20:23 caribe inetd[618]: Configuration complete
Apr 28 14:20:31 caribe ftpd[3138]: FTP session closed
Apr 28 14:20:23 caribe inetd[618]: protocol = udp
Apr 28 14:21:11 caribe above message repeats 7 times
Apr 28 14:20:23 caribe inetd[618]: protocol = tcp
Apr 28 14:23:12 caribe above message repeats 18 times
Apr 28 14:31:37 caribe ftpd[3356]: FTP session closed
[root@caribe]/etc>

*******************
more inetd.conf

##
#
# ARPA/Berkeley services
#
##
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l
telnet stream tcp nowait root /usr/lbin/telnetd telnetd

*****************
Already, restart the inetd -c and inetd -k and reboot the server too...

****************
Also, I run the follow command:
[root@caribe]/etc> netstat -a | grep ftp | grep LISTEN
tcp 0 0 *.ftp *.* LISTEN
[root@caribe]/etc>

****************
Yes, I can do a ftp from this HP box to others
[root@caribe]/etc> ftp 10.58.0.39
Connected to 10.58.0.39.
220 bandeco.cr.freshdelmonte.com FTP server (Version 1.1.214.8 Fri Apr 20 07:27:42 GMT 2001) ready.
Name (10.58.0.39:root): oracle8i
331 Password required for oracle8i.
Password:
230 User oracle8i logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>
****************
The HP unix box with the problem=caribe=10.58.0.3
Another HP unix box=bandeco=10.58.0.39
Other PC windowze
__They are together into same network, without firewall between them..

****************
Has DNS to see with this problem???

What's wrong...??? I don't know What more can I do?

I apreciate your help...

[Biswajit Tripathy]

If you are using ip address and not the hostname to ftp caribe (i.e 10.58.0.3), then DNS is NOT the
problem.

Run the command "nslookup caribe" on both caribe
and the other client and post the output here.

- Biswajit

[GerGon]

****Nslookup in the server caribe, with the problem:
[root@caribe]/etc> nslookup caribe
Name Server: crsnjdc001.freshdelmonte.corp
Address: 10.58.0.13

Trying DNS
Name: caribe.cr.freshdelmonte.com
Address: 10.58.0.3
Aliases: caribe.freshdelmonte.corp

***nslookup in the other HP box:
[oracle8i@bandeco]/home/oracle8i> nslookup caribe
Name Server: crsnjdc001.freshdelmonte.corp
Address: 10.58.0.13

Trying DNS
Name: caribe.cr.freshdelmonte.com
Address: 10.58.0.3
Aliases: caribe.freshdelmonte.corp

[oracle8i@bandeco]/home/oracle8i> nslookup bandeco
Name Server: crsnjdc001.freshdelmonte.corp
Address: 10.58.0.13

Trying DNS
Name: bandeco.cr.freshdelmonte.com
Address: 10.58.0.39
Aliases: bandeco.freshdelmonte.corp

***nslookup in the PC windowze
C:\WINNT\system32>ftp caribe
Connected to caribe.cr.freshdelmonte.com.
Connection closed by remote host.

C:\WINNT\system32>nslookup caribe
Server: crsnjdc001.freshdelmonte.corp
Address: 10.58.0.13

Name: caribe.cr.freshdelmonte.com
Address: 10.58.0.3
Aliases: caribe.FreshDelmonte.corp

*** BUT SEE HERE it's works
c:\>nslookup caribe
Server: crsnjdc001.freshdelmonte.corp
Address: 10.58.0.13

Name: caribe.cr.freshdelmonte.com
Address: 10.58.0.3
Aliases: caribe.FreshDelmonte.corp


c:\>ftp caribe
Connected to caribe.cr.freshdelmonte.com.
220 caribe.cr.freshdelmonte.com FTP server (Version 1.1.214.8 Fri Apr 20 07:27:42 GMT 200
) ready.
User (caribe.cr.freshdelmonte.com:(none)): oracle8i
331 Password required for oracle8i.
Password:
230 User oracle8i logged in.
ftp> bye
221 Goodbye.

Only, it works in this PC, I just proved in other three and no connect..

[Kent Ostby]

If you just use IP address, can you connect all the way around ?

Let's just look at the four unix cases.

From bandeco:

1) ftp caribe

2) ftp 10.58.0.3

From caribe:

3) ftp 10.58.0.39

4) ftp bandeco

What happens for each of the four cases above ?

[GerGon]

From Bandeco:
-------------
[oracle8i@bandeco]/home/oracle8i> ftp caribe
Connected to caribe.cr.freshdelmonte.com.
421 Service not available, remote server has closed connection
ftp> bye
[oracle8i@bandeco]/home/oracle8i> ftp 10.58.0.3
Connected to 10.58.0.3.
421 Service not available, remote server has closed connection
ftp> bye

From Caribe:
-------------
[oracle8i@caribe]/home/oracle8i> ftp bandeco
Connected to bandeco.cr.freshdelmonte.com.
220 bandeco.cr.freshdelmonte.com FTP server (Version 1.1.214.8 Fri Apr 20 07:27:42 GMT 2001) ready.
Name (bandeco:root): oracle8i
331 Password required for oracle8i.
Password:
230 User oracle8i logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> bye
221 Goodbye.
[oracle8i@caribe]/home/oracle8i> ftp 10.58.0.39
Connected to 10.58.0.39.
220 bandeco.cr.freshdelmonte.com FTP server (Version 1.1.214.8 Fri Apr 20 07:27:42 GMT 2001) ready.
Name (10.58.0.39:root): oracle8i
331 Password required for oracle8i.
Password:
230 User oracle8i logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> bye
221 Goodbye.

From caribe to bandeco, yes, but, bandeco to caribe, no..

[Patrick Wallek]

Are you trying to connect to this machine from IP address 10.58.0.182? If not, then it won't work.

Look at your /var/adm/inetd.sec. You have 2 entries for FTP with allow statements. ONLY THE LAST ONE in the file will be used. The lines ARE NOT cumulative. They are exclusive. The 2nd 'ftp allow' statement basically overwrites the first, so that only the machine at 10.58.0.182 will be allowed to FTP to this server.

Fix that, and your FTP will probably work.

[Patrick Wallek · Accepted solution]

If you want to allow ALL machines from the 10.58.0 network to FTP to this machine use the following line in inetd.sec :

ftp allow 10.58.0.*


Then do an 'inetd -c' to have inetd re-read its config files.

[GerGon]

It does not work.. I changed it but not:
[root@caribe]/etc> tail /var/adm/inetd.sec
#
# mountd deny 192.23.4.3
#
# The mountd entry denies host 192.23.4.3 access to the NFS rpc.mountd
# server.
#
# Hosts and network names must be official names, not aliases.
# See the inetd.sec(4) manual page for more information.
dtspc allow 127.0.0.1 loopback caribe
ftp allow 10.58.0.0 ahost anetwork

[Patrick Wallek]

Now you're using the line that says allow only 10.58.0.0, ahost and anetwork to FTP.

That still won't work.

Try:

ftp allow 10.58.0.*

and don't forget to do 'inetd -c'.

[GerGon]

Last question Patrick, if I want to use all subnets 10.58.up.up, How can I configure the file?

ftp allow 10.58.*.* or 10.58.*

Thanks a lot Patrick..

[GerGon]

Thank you, Patrick, Your help were usefull for me..

Thanks a lot...