Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Aug 2002 14:20:48 -0500
From:      David Kelly <dkelly@hiwaay.net>
To:        Luigi Rizzo <rizzo@icir.org>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: natd dies on attempt to open non-passive ftp
Message-ID:  <20020806192048.GA53166@grumpy.dyndns.org>
In-Reply-To: <20020806114516.A33595@iguana.icir.org>
References:  <20020806182256.GA52948@grumpy.dyndns.org> <20020806184126.GA53108@grumpy.dyndns.org> <20020806114516.A33595@iguana.icir.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 06, 2002 at 11:45:16AM -0700, Luigi Rizzo wrote:
> On Tue, Aug 06, 2002 at 01:41:26PM -0500, David Kelly wrote:
> ...
> > A touch tacky of me to reply to my own posting but the first time thru
> > the PR's I missed misc/40331, which I believe to be the same thing I'm
> > reporting here.
> 
> that one was fixed long ago.

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=misc/40331 still lists it as
open. But I did notice in the CVS logs you had effected a repair the
very day the PR was logged. Didn't name the PR but did name the
symptoms.

> It is probably the same section of code, but a different bug
> (plus, the PR was for -current whereas you are using -stable)

Even more egg on my face as somehow I had HEAD in /usr/src/lib/libalias/
while (I think) everything else was RELENG_4.

Not knowing were other such a gaffes may be lurking I'm RELENG_4'ing
right now: "cd /usr ; cvs checkout -r RELENG_4 src"

Hmm. Looks like natd was also HEAD. Probably did this a year or so ago
trying to make passive ftp work thru punch_fw. If anyone has any hints
as to how to get started debugging libalias, I'm listening. Building a
debuggable natd stymied me when I tried last year.

Zeroth step: maybe punch_fw works with ipfw2 for passive ftp?

First step: Repeat the problem. I can not passive ftp thru it. IIRC a
pair of ipfw rules get written but only non-passive works. Second step:
get non-passive working once again and snag a list of the added rules
and think about whether one is the right rule for passive. Third step:
look deep into natd with gdb and figure out how it got there from here.

Will report back success or failure, after I clean up my own mess.

-- 
David Kelly N4HHE, dkelly@hiwaay.net
=====================================================================
The human mind ordinarily operates at only ten percent of its
capacity -- the rest is overhead for the operating system.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020806192048.GA53166>