>> *without* passive:
>>
>> 230 Login successful.
>> Remote system type is UNIX.
>> Using binary mode to transfer files.
>> ftp> ls
>> 200 PORT command successful. Consider using PASV.
>>
>>
>> *with* passive:
>>
>> 230 Login successful.
>> Remote system type is UNIX.
>> Using binary mode to transfer files.
>> ftp> pass
>> Passive mode on.
>> ftp> ls
>> 227 Entering Passive Mode (63,245,208,138,207,223)
>> 150 Here comes the directory listing.
>> -rw-r--r--    1 ftp      ftp           528 Nov 01 23:27 README
>> -rw-r--r--    1 ftp      ftp           560 Sep 28 08:07 index.html
>> drwxr-xr-x   30 ftp      ftp          4096 Nov 15 14:40 pub
>> 226 Directory send OK.
>> ftp> quit
>> 221 Goodbye.
> 
> It works ! Could this indicate something I did wrong ? Can you explain it
> to me ?
> 
> Thank you, anyway !
> 
> \bye

Hi again,

I suppose it is your firewall blocking the inbound ftp connection which 
the ftp server tries to establish after the ls command. In active mode 
the server initiates a new connection to your machine while in passive 
mode the server opens a new port, tells your machine the portnumber and 
your machine initiates the new connection. So rules like eg.

iptables -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp -j DROP

which allow connections established from your machine but block new 
incoming connections, allow passive ftp but not active.

Thorsten
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to