FTP session hang

[lardum]

When a client behind a firewall tries to connect to my ftp server behind my Cisco PIX it hangs on:
150 Opening data connection for file list.
I've created a conduit for it and also fixup protocol. Anyone know what this can be caused by?
The client is running in PASV mode.

 

[yizhar]

HI.

It could be a problem at the client firewall.
You should try to connect to your server from another location and see what happens.


Use syslog messages at level 4 (warnings) to see if the pix is blocking anything, or level 6 (info) to see also the legitimic traffic and sessions built at the pix to troubleshoot.


Also try debug of the fixup at the pix. I think that you should issue the following commands from a telnet session:

terminal monitor
debug ftp


Post here more details - pix version, ftp server version, ftp port used, and related pix configuration.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[thethmon]

You might also want to check what version of PIX OS you are running. I don't remember what version, but there was a bug in the PIX OS that caused problems with PASV mode of FTP. Probably best to search Bug Toolkit on CCO. Todd Hethmon
thethmon@hethmon.com