Topic: no ftp from outside

[thierry]

Hi,

I'm unable to connect to my e-smith server by ftp from outside.

Here is my configuration :

Server Mode   servergateway
Local IP address / subnet mask   192.168.1.254/255.255.255.0
External IP address / subnet mask   192.168.65.17/255.255.255.0
Gateway
Additional local networks   No additional networks defined
DHCP server   enabled
Beginning of DHCP address range   192.168.1.100
End of DHCP address range   192.168.1.250

I can ping  it from outside, but not accessing it using ssh or ftp.

All ports are open :

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Interesting ports on localhost (127.0.0.1):
(The 1590 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     open        ftp                    
22/tcp     open        ssh                    
25/tcp     open        smtp                    
53/tcp     open        domain                  
80/tcp     open        http                    
113/tcp    open        auth                    
139/tcp    open        netbios-ssn            
443/tcp    open        https                  
980/tcp    open        unknown                
981/tcp    open        unknown                
3128/tcp   open        squid-http

I'am registerded with dyndns.org to have a dynamic dns.

What must i do ?

Thanks a lot for your help.

Thierry

[Terry Brummell]

You didn't mention if you allowed FTP access in the Remote Access section of the server manager.

[thierry]

Yes.

In remote access I have :

FTP access limits : Normal usage

[Bill Talcott]

But what do you have for "FTP user account access", which determines if external FTP connections are allowed?

[thierry]

I have :

FTP user account access : public

[Robert]

It looks like your External IP and Gateway are not set correctly. How is your server connected to the internet? Can you successfully run the internet access test in the admin console? How did you run the ping test? Are you sure you didn't just ping an IP that you had before, but is now assigned to someone else? What does "/sbin/ifconfig" say?

[thierry]

My server is connected using a DSL line (speedtouch USB modem).

ifconfig says :

eth0      Link encap:Ethernet  HWaddr 00:01:02:D8:32:09  
          inet addr:192.168.1.254  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:179851 errors:0 dropped:0 overruns:1 frame:0
          TX packets:267878 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:17426002 (16.6 Mb)  TX bytes:313070397 (298.5 Mb)
          Interrupt:10 Base address:0xa400

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:3924  Metric:1
          RX packets:1134 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1134 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:178827 (174.6 Kb)  TX bytes:178827 (174.6 Kb)

ppp0  Link encap:Point-to-Point Protocol  
          inet addr:80.14.183.72  P-t-P:80.14.183.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:249987 errors:0 dropped:0 overruns:0 frame:0
          TX packets:171673 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10
          RX bytes:308201169 (293.9 Mb)  TX bytes:15208875 (14.5 Mb)

Internet access test on using server-admin is OK.

It seems you are right, when I try to ping sockho.dyndns.org, it doesn't works.
But when I try ping 80.14.183.72, ping works.

It might be a dyndns problem, but ftp still not works.

I run the ping test from our server (www.sockho.com).

Thanks for your help.

thierry

[Robert]

Try /sbin/e-smith/signal-event ip-change 80.14.183.72 (or whatever ip ifconfig currently reports)
That should correctly set your external ip and update your firewall rules accordingly.

[thierry]

it works !

You are right.

Thanks to terry, bill and robert for your help.

In fact the problem was my modem is deconnected every few hours, but I don't know why (I use a usb dls modem - alcatel speedtouch), so I made a little script launched every 5 minutes by cron, in order to reconnect it. So I need to add signal-event in this script.

please 2 questions more :

- How can I get my ip address from a script ?
- What can be the reason of my modem is disconnected every few hours ?

I installed the newest driver from alcatel, but no change...

Thanks a lot to all.

thierry

[Robert]

You shouldn't have to make your own script to signal ip-change. There already is a script to do this that should run automatically whenever your computer reconnects to the internet. You need to figure out why this script is not run automatically on your server. Have a look in the messages log for useful info around the time that your modem makes a connection.
Maybe your ISP is kicking you off the net every few hours. My ISP kicks me off about once a day. I have a regular PPP connection to my ISP that is set to "continuous connection" in the admin console. Whenever my ISP terminates the PPP connection, the server automatically reconnects and runs ip-change.
Maybe you can start a new thread to ask if anyone knows of any peculiarities with your modem or ISP.