Subject: Re: problems with ftp server or NAT conf?
To: Adam Glass <adam@clarity.net>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: netbsd-help
Date: 04/10/2003 22:49:20
On Thu, Apr 10, 2003 at 01:21:59AM -0700, Adam Glass wrote:
> [I searched the archives and didn't find this mentioned.]
>
> Often when trying to install NetBSD by having the installer download
> binary sets from ftp.netbsd.org, I get errors like the following:
>
> # ftp -a ftp.netbsd.org
> Trying 204.152.184.75...
> Connected to ftp.netbsd.org.
> 220 ftp.netbsd.org FTP server (NetBSD-ftpd 20020615) ready.
> 331 Guest login ok, type your name as password.
> 230-
> 421 Service not available, remote server has closed connection.
> ftp: Login failed.
>
> [The above occurred, of course, after a successful install.]
How many time between the 230 and 421 ?
>
> If I repeat the command a few times, I can always get in after a
> seemingly random number of retries, anywhere from 1-20 or so. The
> only thing I can think is that -- unless ftp.netbsd.org is really
> broken, in which case everyone would be shouting about it -- I have
> some sort of broken NAT/ipfilter stuff on the 1.5.3_ALPHA firewall +
> NAT box that sits between the ftping system and the Internet. (This
> doesn't seem to affect any sites but ftp.netbsd.org, but it does
> affect both lukem ftp and SecureFX ftp sessions to ftp.netbsd.org.)
>
> These are my NAT rules. Any obvious mistakes?
>
> map fxp0 int.n.e.t/24 -> ext.ad.dr.ess/32 proxy port ftp ftp/tcp
> map fxp0 int.n.e.t/24 -> ext.ad.dr.ess/32 portmap tcp/udp 1025:65535
> map fxp0 int.n.e.t/24 -> ext.ad.dr.ess/32
>
> Any advice would be much appreciated.
This looks good.
--
Manuel Bouyer <bouyer@antioche.eu.org>
NetBSD: 24 ans d'experience feront toujours la difference
--