On Wed, 1 Jun 2011 15:30:13 -0700, Starr, Alan <[email protected]>
wrote:

>After establishing the FTP session, type the following
>
>SITE    EPSV4
>LOCSITE   EPSV4
>
>I can't guarantee that the LOCSITE command will work on the FTP client
you're using.

I think I can guarantee that "LOCSITE EPSV4" will only work on the z/OS FTP
client.

An ftp client more properly issues the EPRT/EPSV commands first, reverting
to PORT/PASV if those are rejected.  (An option to force use of PORT/PASV
may be provided.)  [Found a bug in this area in IBM's testcase ftp server!]

In general, you always want to use passive mode behind a firewall (NAT or
not) since the fw will normally not allow an inbound connect.  Consider that
if the control connection is encrypted, the fw cannot see the PORT command.

An FTP client may have the capability to ignore (or may ignore by default)
the IP address provided on PASV, simply connecting back to the same IP as
used on the control connection.

Alan Altmark
z/VM and Linux Consultant
IBM Lab Services

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to