CSS and Extended Passive FTP problem.

Hi everyone.
I'm having a problem setting up a load balanced cluster of FTP servers behind a CSS 11506.
I can FTP into the cluster fine. I am redirected to one of the machines in a round robin fashion and can log in. The problem arises on mac's where typing in an ls command returns this:
ftp> ls
229 Entering Extended Passive Mode (|||32999|)
200 EPRT command successful
421 Service not available, remote server timed out. Connection closed
Now, if I type in the EPSV command and disable Extended Passive Mode prior to connecting to it, it works fine.
Also, connecting to any of the servers directly with epsv enabled works fine as well.
We have over 800k hits per month and telling everyone to disable epsv will be a problem. Is there a way to enable extended passive mode through the css?
Here is my config:
Group: ftpServers1 - Active (198.202.122.181 Not Redundant)
Session Redundancy: Disabled
Last Clearing of Stats Counters: 03/20/2007 14:28:25
Associated ACLs: NONE
Source Services:
DNS
Name: Hits: State: Load: Trans: Keepalive: Conn:
rem_ftp1 19857 Alive 44 6 FTP 0
rem_ftp2 38175 Alive 87 0 FTP 0
Destination Services:
NONE
Group Service Total Counters:
Hits/Frames/Bytes: 58032/58339/4277264
Connections Total/Current: 25/0
FTP Control Total/Current: 0/0
CSS11506# show rule pdb ftp-rule1
Name: ftp-rule1 Owner: pdb
State: Active Type: FTP
Balance: Round Robin Failover: N/A
Persistence: Enabled Param-Bypass: Disabled
Session Redundancy: Disabled
IP Redundancy: Not Redundant
L3: 198.202.122.181
L4: TCP/21
Url:
Redirect: ""
TCP RST client if service unreachable: Disabled
Rule Services & Weights:
1: rem_ftp1-Alive, S-1
2: rem_ftp2-Alive, S-1
Thanks
Boki

EPSV is not supported.
The only workaround available to load balance passive ftp servers is to use "PASV" command instead of "EPSV" on clients.
Syed Iftekhar Ahmed

Similar Messages

  • Let's Revisit MacOS Server's Passive FTP Problem

    Mac OS X Server's built-in FTP server can't be configured to determine which ports above 1024 will be used for Passive FTP connections. More often than not, this means that clients behind NAT routers (for a variety of complicated reasons) can't discover which of the "high ports" are being used in their passive connection. Furthermore the Mac OS X administrator would have to open every port above 1024 to anticipate connections, severly weakening the security of the system.
    The effect for the user is that their FTP client can connect, but can't list the contents of a directory or upload/download anything.
    Here's a primer on the difference between Active and Passive FTP:
    http://slacksite.com/other/ftp.html
    Apple introduced a "solution" to the problem by making this addition to the Network Services manual sometime around 10.3 server:
    "See if the client is using FTP passive mode, and turn it off. Passive mode causes the FTP server to open a connection on a dynamically determined port to the client, which could conflict with port filters set up in IP filter service. "
    This was a tacit admission that MacOS's various FTP daemons over the years have unchangeable, precompiled configurations. The typical workaround was choppy, but workable: replace Apple's built-in FTP daemon with a fully configurable one like ProFTPd or PureFTPd, configure a narrow range of ports for your own security, and configure your firewall to match.
    We're on Tiger server now and that's still in the Network Services manual. Leopard or whatever is looming. Will Apple ship an FTP server that works out-of-the-box with its own firewall this time? Any new thoughts or solutions?

    I think you need to do a little more research on FTP. Most of the actual problems you describe are inherent in FTP and nothing to do with any kind of Apple-inhibited FTP server.
    For example, you say:
    > Mac OS X Server's built-in FTP server can't be configured to determine which ports above 1024 will be used for Passive FTP connections
    Not true. You can choose whatever port range you like using the portrange directive in /etc/ftpd.conf
    By default this directive isn't set so the entire port range is used. Feel free to change that.
    >The effect for the user is that their FTP client can connect, but can't list the contents of a directory or upload/download anything.
    This is an inherent flaw in FTP, suffered by every FTP server on the market. Nothing to do with Apple.
    > This was a tacit admission that MacOS's various FTP daemons over the years have unchangeable, precompiled configurations
    Again, incorrect. The suggestion was a workaround for the FTP protocol restriction, not for Apple's implementation. I've been dealing with the exact same issues for years on various Sun servers I've run.
    Most of the problems you describe regarding FTP and firewalls won't be solved at all in any future OS update - from any vendor. FTP was never designed with firewalls and security in mind. The only solution is to fix the underlying protocol, or use something different altogether.

  • Remote and Testing Server FTP Problems

    I have a Dreamweaver site defined. I have an 2 domains and 2
    FTP accounts. I am using one for my remote server and one for my
    testing server. When I go to preview, it uploads the file to the
    remote server instead of the testing server. Then it goes and tries
    to view the file on the testing server and there is a file not
    found error. If I try the same thing but use 2 network drives or 1
    network drive and 1 FTP account (remote or testing), everything
    works as expected. Any ideas why this happens?

    Sounds like you are properly configured. I don't have a good
    idea why this
    is not working....
    Murray --- ICQ 71997575
    Adobe Community Expert
    (If you *MUST* email me, don't LAUGH when you do so!)
    ==================
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    ==================
    "supwoman" <[email protected]> wrote in
    message
    news:fj1jbs$mt8$[email protected]..
    >I have one Dreamweaver site defined.
    >
    > I have one domain (www.1.com) and an FTP account to
    upload files to the
    > folder
    > pointed to by that domain. I am using this information
    for my remote
    > server as
    > part of my Dreamweaver site.
    >
    > I have another domain defined (www.2.com) and another
    FTP account to
    > upload
    > files to the folder pointed to by this domain. I am
    using this information
    > for
    > my testing server as part of my Dreamweaver site.
    >
    > The pages I am building are Coldfusion, so I want to be
    able to test them
    > before deploying them to my live site (www.1.com). I
    cannot setup a local
    > server to do my testing.
    >
    > So, I should be able to checkout a file test.cfm, make
    some changes, then
    > hit
    > the server debug button to preview those changes. It
    should upload the
    > file to
    > the testing server and take me to the
    www.2.com/test.cfm. Then, when I
    > finished
    > testing and check in the file it should upload it so it
    is found at
    > www.1.com/test.cfm.
    >
    > The problem I have is that when I got to test, it
    uploads the file to
    > www.1.com/test.cfm instead of www.2.com/test.cfm.
    >
    > If I use network drives instead of two FTP accounts,
    everything works
    > fine. I
    > hit the server debug button, it transfers the file to
    the right place.
    >
    > Sorry, if I didn't explain that well.
    >
    >

  • Passive FTP and the Leopard firewall

    Hi,
    We have an staff upload server that uses the built-in Leopard firewall. It is fed by two proprietary applications, one of which uses passive ftp only. We are getting a small number of incidents where the passive upload is unsuccessful. Initial contact is made (visible in the logs and as a connection in the server admin gui) but the upload doesn't proceed. A user might try uploading several times without success. On other occasions, the same user from the same computer has no problems at all.
    We have the ftp service enabled on port 20-21 and the FTP service PASV port range enabled 49152-65535.
    If I add the uploading computers' ip number to an access group with no port restrictions on the firewall, the uploads are always successful.
    With my very limited knowledge of ftp and firewalls, this suggest that the negotiated port for the data transfer is outside the default port range used by Apple. Is this likely? Are there any implications in changing the range?
    Or am I totally confused and should I be looking elsewhere?
    Thanks,
    Ross Glover

    By default, the FTP server doesn't restrict itself to any particular passive port range. To make it match what the firewall claims it should be, edit the file /Library/FTPServer/Configuration/ftpaccess and add the line:
    passive ports 0.0.0.0/0 49152 65535
    ...then restart the FTP service and retest.

  • When I start adobe Pro Extended it tells me my serial number is not valid. We purchased this number back in 2009 and never had a problem till now.

    When I start adobe Pro Extended it tells me my serial number is not valid. We purchased this number back in 2009 and never had a problem till now.

    Hi Jeff ,
    Please provide me the following information so that I can see what best can be done to get your issue fixed.
    Are you using Acrobat 9 extended ?
    How did you purchase your software ?Is it through some outside vendor or through Adobe?
    In case you have purchased it from some outside vendor ,would recommend you to get in touch with them .
    However ,referring the following link you can cross verify the serial number you are entering .
    https://helpx.adobe.com/x-productkb/global/find-serial-number.html
    Regards
    Sukrit Dhingra

  • K8N Neo2 boot problems, freezes at testing base and extended memory

    I recently bought a motherboard/cpu combo and been having problems.   I'll start with my system specs:
    MSI K8N Neo 2
    AMD 64 3000+ Rev E
    XFX Geforce 6600GT
    Corsair Valueselect 184-Pin DDR SDRAM Unbuffered DDR 400 , 4 512MB sticks
    400W Powersupply
    I ordered a mother/cpu combo along with other parts to build a new computer.  Finally everything arrived a couple days ago and I started building.  First I installed the mb, cpu, ram and vid card to make sure everything was working.  When I started it up I got nothing.  So I started messing around and dropped the ram down to only one stick and used the D-Bracket.  I figured out the cpu had been dislodged during shipping, got it installed again and was able to boot up could get into the bios etc.  I put back in my other three sticks of ram everything seems to be working.  Next I hooked up the hd, cd/dvd etc.  Tried to boot up and it freezes after listing the total memory.  Looking at the D-Bracket it shows it freezes at Testing Base and Extended Memory.  So I unplug everything back down to just cpu, ram and vid card to see if it still works.  It freezes again at testing base and extended memory.
    At this point I drop the ram back down to one stick.  It boots up and I can get into the bios again.  So I shut everything off and put back in the rest of the ram.  Turn it on and it freezes at the same point.  Hmm, drop it back down to one stick and I can make it through to the bios.  Now I'm just frustrated and want to see if I can get my other components working and maybe windows installed then I'll come back to figuring this out.  So I save and exit the bios, while it's rebooting again it freezes at the Testing base and extended memory.
    After playing around with it some more over the past day here is what I've come to see.  If I move one stick of ram around I can get past the testing extended memory to get into the bios or up to the point of needing a boot disk etc.  If I reset or reboot it from this point it will freeze.  If I just leave my computer alone and off for around 30 minutes I can start it up once then it will freeze.  Now I'm just confused why it will intially start up as everything is ok but freeze if it resets.  Everytime it freezes it will be at the Testing Base and Extended Memory.
    Some things I have tried while talking to a friend about the problem is clearing the cmos and also putting in the ram settings in the bios.  Neither seems to work.  I've done a lot of searching on google and in this forum and haven't seen anyone talk about a problem like this so hopefully I'm not missing anything.
    If there's anything else you guys need to know about my setup let me know.  I also hope I wrote this all clearly because at this point I'm pretty frustrated.
    Thanks!

    Ok, newest update.
    After clearing the cmos I put in a stick of ram.  Everything loaded up ok and I went into the bios and entered the values (2.5-3-3-8) and 2.75V.  To my amazement it didnt' lock up after saving and exiting and it made it through to the Disk Boot Failure etc.  So I hit the reset button to see if it would go all the way through again and it froze again with D-Bracket LEDs showing the Testing base and extended.  I turned off the case with the on off switch in the back and powered up again.  It went right through in the past I'd have to wait.  So it seemed like things were a little better.
    So I put in a second stick of ram and it booted all the way through, tried to reset to see what would happen and it froze.  Turned power on and off and it froze not making it anywhere.  Tried that a few more times and it would always freeze right away making no progress.
    Back down to one stick of ram and it works again where I can go into the bios, save and exit and it'll make it through a full boot up to Disk Boot Failure.  Weird thing was once after just hitting the reset button it actually made it all the way through.  So it seems to act differently almost everytime.
    To me at least there doesn't seem to be a logical way I can think of what the problem could be.

  • ACE access-list and Passive FTP

    Can servers sitting behind the ACE successfully ftp files if the following rules are in place?
    access-list word line x extended permit tcp source destination eq 21
    access-list word line y extended permit tcp source destination eq 20
    With those lines I can establish an FTP session, but unable to transfer files.
    With the following statement access-list word line x extended permit ip source destination, passive ftp works?
    IS this because the ACE acl does not allow for stateful inspection of an FTP session?
    Thank you

    You are right lack of fixup/inspect is the reason for FTP connections to fail.
    You need something in line with the following config
    class-map match-all FTP-Traffic
    2 match port tcp eq ftp
    policy-map multi-match xyz
    class FTP-Traffic
    inspect ftp
    Syed Iftekhar Ahmed

  • Just downloaded and installed CS6 extended, it says problems with display driver? any solution?

    Just downloaded and installed trial version CS6 extended. It will not display any file and says display driver problem. Any solution?

    Update your graphics driver.
    Mylenium

  • Css and RequestDispatcher problem

    I'm using JBoss + embedded Tomcat (not using apache
    yet in development).
    I have problem with JSP and css. My JSP includes css
    with this tag:
    <link rel="stylesheet" href="style.css" type="text/css">If I access the JSP directly from web-browser IE5
    to http://127.0.0.1:8080/myContext/fileName.jsp ,
    it's displayed correctly.
    However, if I let a servlet dispatch the JSP, the css didn't
    included somehow (browser displayed the JSP without css-formatting).
    RequestDispatcher dispatcher = getServletContext().
                             getRequestDispatcher("/fileName.jsp");
        if (dispatcher != null)
            dispatcher.forward(request, response);
        /* ... */I put css and JSP in the same subdir. Is this a Tomcat error, or
    I forgot to set something in the request object, or
    I need to append something to "/fileName.jsp"?
    Thanks in advance.
    Verdi

    Unfortunately, the solution I found was to "hardcode" the absolute path. For example:<link rel="stylesheet" href="<%= request.getContextPath() %>/style.css" type="text/css">There're another way I think may preserve the context
    path, that is to use response.sendRedirect. Problem with
    this approach is however, you can't embedd javabean
    as "attribute" cause attribute will be removed in the new request (of redirected jsp).
    -- Verdi March --

  • CSS and Images export problems

    I am trying to export a page to dreamweaver using css and images method. I have created rectangles for the header, content and footer to create divs. Added text and graphics. When I export, it does not export with html codes and css, it gives me one big .jpg. "Layer_1.jpg".  Does anyone know what I'm doing wrong?
    Thanks,
    Wendy
    Message was edited by: wen8   I just found someone else with the exact same problem who said rebooting solved his problem. This also worked for me. Yeah!

    Problem fixed by rebooting!

  • CSS and image export problems

    Hi
    Is the CSS and image export supposed to output anything
    legible. Right now, it produces garbage that looks nothing like my
    project. Images are distorted. Nothing lines up correctly. Has
    anyone else had similar problems?
    Why does the feature only support creating a single page? Is
    there any way to get it to export all pages?
    Why does the feature ignore behaviors? The HTML and image
    export supports behaviors so why can't the CSS and image export? Is
    there any way to get it to support behaviors?
    Thanks

    Problem fixed by rebooting!

  • Active and Passive FTP

    Hi
    I want to setup an Passive FTP and an Active proxy service in Oracle Service Bus 10.3. What is the best way of doing this?
    Regards

    see support note 860423.1
    Oracle Service Bus FTP transport is implemented to use passive mode in proxy services (inbound) and active mode in business services (outbound).
    This behavior can be changed and OSB can be forced to use passive mode for both inbound and outbound FTP requests by applying a patch.

  • CSS and Images Export problem

    Hello,
    I've created a very basic layout with a header, some columns of text and an image. Everything is aligned perfectly, I've put all the text into rectangles, created a slice for the image, and nothing is overlapping. When I use the Export CSS and Images option, it just exports everything as one big image. What am I doing wrong here?
    Thanks,
    Jason

    Sure, here you go:
    http://www.glowfoto.com/static_image/07-130236L/8862/png/04/2010/img6/glowfoto

  • CSS and more - Problem

    Hi people,
    j have found this
    http://www.dhtmlgoodies.com/index.html?whichScript=ajax-tooltip
    but i don't know how I implement this in apex.
    So that i have i general question.
    How can i implement my own css and in which way can i use these?
    is there a how to or something?

    Hello,
    You can maintain your own, external (preferably OS level) CSS file, and load it using your page template, the same way APEX loading its own CSS file.
    If you look at your page template, in the HTML Header section, you'll see something like this:
    <link rel="stylesheet" href="#IMAGE_PREFIX#themes/theme_5/theme_V2.css" type="text/css" />In this case this is the CSS file for theme 5. You can put your own CSS file in the same directory as the rest of your theme file, and use a similar link.
    Take into consideration that because the cascading effect (the first C in CSS) you need to load your file after the original APEX files, so in case you are targeting the same selectors (elements/attributes), yours will get precedent.
    The best place to start learning a bit more about CSS is the following http://www.w3schools.com/css/default.asp
    Hope this helps,
    Arie.

  • Problem in Loading CSS and JS in strus

    Hi,
    I created an employee registration form using JSP. When I load the "Registration Form" That time my CSS and JS are working well.
    Its works fine if all the fields are entered correctly then "sucess form is displaying". If I give wrong field entries after submiting the form. I am doing the server validation. If any field is missing or wrong I calling "fail" and forward to same employe registration form. When this form is loaded at that time my CSS and JS not working.
    Please help me. my JSP page
    <!-- JSP CODE -->
    <%@ page import="modEmp.bisCommon.*,java.util.*,modLogin.bisCommon.*"%>
    <%@ include file="init.jsp"%>
    <%!
         ArrayList<String> list = new ArrayList<String>();
         ArrayList<String> list1 = new ArrayList<String>();
         String rec[]=new String[150];
         cBLabels cbl1 = null;
    %>
    <%
         for(int i=0;i<rec.length;i++)
              rec="";
    cbl1 = new cBLabels();
         rec=cbl1.getLabels();
    %>
    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <html>
    <head>
    <title>Employee Registration Form</title>
    <script language="javascript" type="text/javascript" src="js-modEmp/addEmpval.js">
    </script>
    <script language="javascript" type="text/javascript" src="js-modEmp/datetimepicker.js">
    </script>
    <link rel="stylesheet" type="text/css" href="css-modEmp/styles.css">
    </head>
    <body onLoad="clearForm();">
    <%
         try
              if (request.getAttribute("submit").equals("fail"))
    %>
                   <%@ include file="failure.jsp"%>
    <%
         catch (Exception ex1)
    %>
    <%@ taglib uri="/META-INF/tlds/struts-html.tld" prefix="html"%>
    <%@ taglib uri="/META-INF/tlds/struts-bean.tld" prefix="bean"%>
    <html:form action="addemp.do">
    <h2>EMPLOYEE REGISTRATION FORM </h2>
    <h2 style="font-style: italic;">Personal Details</h2>
    <%=rec[0]%>:      <html:text property="fname" size="20"/>      <%=rec[1]%>:      <html:text property="mname" size="20"/>
    <%=rec[2]%>:      <html:text property="lname" size="20"/>      <%=rec[3]%>:      <input name="calc" id="demo1" type="text" size="20" disabled>Pick a date<html:hidden property="dob" />
    <%=rec[4]%>:      <html:text property="mobileno" size="20"/>      <%=rec[5]%>:      <html:text property="emailid" size="20"/>
    <%=rec[6]%>:      <html:text property="ftname" size="20"/>      <%=rec[7]%>:      <html:select property="gender"> <html:option value="male">Male</html:option> <html:option value="female">Female</html:option> </html:select>
    <%=rec[8]%>:      <html:text property="nationality" size="20"/>
    </html:form>
    </body>
    </html>
    This is my strus-config.xml file
    <struts-config>
         <form-beans>
              <form-bean
    name="inputForm"
    type="modEmp.bisVo.cVEmployee"/>
              <form-bean
    name="searchForm"
    type="modEmp.bisVo.cVSearchEmp"/>
              <form-bean
    name="leaveForm"
    type="modAttendance.bisVo.cVEmpLeave"/>
              <form-bean
    name="loginForm"
    type="modLogin.bisVo.cVLogin"/>
    <form-bean
    name="changepassForm"
    type="modLogin.bisVo.cVChangePasswd"/>
    <form-bean
    name="empSalForm"
    type="modSalary.bisVo.cVoUpdateEmpSal"/>
         </form-beans>
         <action-mappings>
              <action
    path="/addemp"
    type="modEmp.bisAction.AddEmpAction"
              input="/jsp-modEmp/addempform.jsp"
    name="inputForm"
                   scope="request">
                   <forward name="success"
                        path="/jsp-modEmp/success.jsp"
                        redirect="false"></forward>
                   <forward name="fail"
                        path="/jsp-modEmp/addempform.jsp"
                        redirect="false"/>
              </action>
    </action-mappings>
         <!-- <plug-in className="modLogin.bisCommon.cBInitialise"></plug-in> -->
    </struts-config>
    Help me.....

    Hi dude,
    You can solve this using two ways...!
    1. You can give the hard-core path (full path with the project name: /ProjectName/DirectoryName/JavaScriptFileName.js)
    2. You can use request.contextPath() (to get the current context name)
    Try this below code
    <head>
    <title>Employee Registration Form</title>
    <script language="javascript" type="text/javascript" src="<%=request.getContextPath%>/js-modEmp/addEmpval.js">
    </script>
    <script language="javascript" type="text/javascript" src="<%=request.getContextPath%>/js-modEmp/datetimepicker.js">
    </script>
    <link rel="stylesheet" type="text/css" href="<%=request.getContextPath%>/css-modEmp/styles.css">
    </head>

Maybe you are looking for

  • Failover did not happen when one node went down!!! PLEASE HELP

    Hi gurus, Yesterday one disaster struck my RAC database. We have two node cluster and it is 10.2.0.2, both of them located in different sites, yesterday suddenly power went down and the one of the network switch went down and got destructed, node one

  • Forum registration captcha

    Hi! I think the forum registration captcha ("For which Linux distribution is this forum?") should accept either "Arch", "Arch Linux" and "Archlinux" as correct replies. It took me several minutes of uselessly twiddling with my browser settings before

  • I keep getting error when in the install mode in shared technology

    Getting error when downloading and installing element 11 & premier 11 what can I do ?

  • Data Modeler - How to add foreign keys to physical model?

    I imported few tables from data dictionary and tried to generate a DDL file. The DDL didn't include foreign keys for some reason. Then I noticed that the foreign keys are in the relational model but not in the physical model. How do I get those forei

  • Script 2 pdf outputs?

    I'm looking for a workflow solution where it's required to output 2 pdfs, one for production and one for proof. Basically, it's a pain in the hoop to create 2 pdfs each time. What I'm looking for is a way via script to export to PDF Chooses currently