Hi Robert!

Can you tech me how to disable reverse DNS for FTP server?

T.Q.
Jason Lim

 


Robert Toth wrote:
> 
> Hiya Svavar!!
> 
> The problem is probably related to the fact that your workstation(s)
> INSIDE of your lan (on the 10.100.xx.xx network) do not have DNS entries
> in your DNS server... Proof is that the reverse DNS for the external
> world works great usually (unless you try a non-listed host behind a NAT
> gateway, or something similar : this should also take 20 or so seconds
> as well as there is no official DNS setup for this)
> 
> Two suggestions:
> 1) Enter in your complete DNS database for all your workstations and
> inside hosts on your 10.100 network..  (BEST)
> 2) Disable Reverse-DNS lookups on the FTP server (less convenient for
> logging purposes - You'll only have IP addresses that you'll be forced
> to look up by hand if you need to.. Less secure as you won't be able to
> enforce Reverse DNS validation rule for logon (ie: drop any non-listed
> hosts/nodes that attempt to logon - only valid Internet DNS-listed hosts
> are granted access).
> 
> So if you don't want to block anyone from your FTP server, and if you
> don't really need FQDN's in the log file, simply disable the Reverse-DNS
> lookups in the FTP server configuration.  That will remove the delay.
> 
> Otherwise, spend the time creating the missing internal DNS database, so
> that you can keep the security rules in place...
> 
> Hope this helps...
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Svavar Örn
> Eysteinsson
> Sent: October 1, 2001 8:56 AM
> To: [EMAIL PROTECTED]
> Subject: RE: Slow FTP Connection?
> 
> Hi. Thanks for the reply.
> I'm not very good at DNS so can you give me a hint.
> I checked the reverse address for the server in 10.100. It's :
> 
> Address : 10.100.0.5
> Hostname : x.internal.x.is
> TimeToLive : default
> 
> Best regards,
> 
> Svavar Orn
> [EMAIL PROTECTED]
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of # sriram #
> Sent: 1. október 2001 12:40
> To: Red Hat 7. 1 MailingList
> Subject: Re: Slow FTP Connection?
> 
> check the reverse lookup on ur DNS for this machine
> 
> On Mon, 1 Oct 2001, Svavar Örn Eysteinsson wrote:
> 
> !Date: Mon, 1 Oct 2001 12:35:33 -0000
> !From: Svavar Örn Eysteinsson <[EMAIL PROTECTED]>
> !Reply-To: [EMAIL PROTECTED]
> !To: Red Hat 7. 1 MailingList <[EMAIL PROTECTED]>
> !Subject: Slow FTP Connection?
> !
> !Hello.
> !I'm having a strange problem with my ftp server, not a problem maby a
> bug.
> !My FTP server is running the latest Kernel 2.4.10 and ProFTPD in Xinetd
> !mode.
> !The server has two interfaces. The Eth0 is the public(213.176.x.x)
> !and Eth1 as internal(10.100.0.5). Every time a make a ftp connection to
> the
> !server on 10.100.0.5 or 213.176.x.x address it takes about 10-20sec to
> !display
> !the login window. This happens when i am at work on the internal net.
> !But when i do it on some other place, for an example another company
> with
> !a diffrent pipe and ISP it displays the ftp login window right ahead.
> !
> !Any ideas? This is very strange.
> !
> !This happens when i do : "ftp 10.100.0.5" or "ftp 213.176.x.x" :
> !
> !"Connected to x.x.x.x"
> !
> !and it waits there for 10-20secs and finnaly it displays :
> !
> !220 ProFTPD 1.2.2 Server (HOSTNAME) [hostname]
> !User (x.x.x.x:(none)):
> !
> !Is it maby something to do with the firewall?
> !
> !Thanks for your time.
> !
> !Cheers!
> !
> !Best regards,
> !
> !Svavar Orn
> [EMAIL PROTECTED]
> !Reykjavik - ICELAND
> !
> !
> !
> !_______________________________________________
> !Seawolf-list mailing list
> [EMAIL PROTECTED]
> !https://listman.redhat.com/mailman/listinfo/seawolf-list
> !
> 
> ----------------------------------------------------------
> When i read about the evils of smoking , I gave up reading
> ----------------------------------------------------------
> 
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list
> 
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list
> 
> _______________________________________________
> Seawolf-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/seawolf-list



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to