<div dir="ltr">The easiest solution would simply be to use passive mode. Its likely an issue that people upload to old address vs <a href="http://revu.ubuntuwire.com">revu.ubuntuwire.com</a><br><br><div class="gmail_quote">
On Fri, Aug 1, 2008 at 3:47 AM, Stefan Potyra <span dir="ltr"><<a href="mailto:stefan.potyra@informatik.uni-erlangen.de">stefan.potyra@informatik.uni-erlangen.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi,<br>
<div><div></div><div class="Wj3C7c"><br>
On Thursday 31 July 2008 20:09:30 Matvey Kozhev wrote:<br>
> It says:<br>
><br>
> Error '425 Security: Bad IP connecting.' during ftp transfer of<br>
> libbrowserlauncher2-java_1.3.dfsg-0ubuntu1.dsc<br>
<br>
</div></div>hm... interesting, doesn't appear anywhere in the logs (only that the upload<br>
failed). However I'm quite sure that bit in vsftpd is responsible in what<br>
you're seeing:<br>
<br>
int<br>
vsf_ftpdataio_get_pasv_fd(struct vsf_session* p_sess)<br>
[..]<br>
/* SECURITY:<br>
* Reject the connection if it wasn't from the same IP as the<br>
* control connection.<br>
*/<br>
if (!tunable_pasv_promiscuous)<br>
{<br>
if (!vsf_sysutil_sockaddr_addr_equal(p_sess->p_remote_addr,<br>
p_accept_addr))<br>
{<br>
vsf_cmdio_write(p_sess, FTP_BADSENDCONN, "Security: Bad IP<br>
connecting.");<br>
vsf_sysutil_close(remote_fd);<br>
vsf_sysutil_sockaddr_clear(&p_accept_addr);<br>
return -1;<br>
}<br>
}<br>
<br>
Now I don't have the best knowledge about networking stuff, but it looks like<br>
the passive ftp data connection seen by vsftpd on spooky doesn't originate<br>
from the same address. The question is what this tells us (maybe someone is<br>
intercepting this connections? <a href="http://s.th" target="_blank">s.th</a>. else?) or how to fix it. Maybe using<br>
active instead of passive mode helps? Anyone with better network knowledge<br>
got some more hints?<br>
<br>
Cheers,<br>
<font color="#888888"> Stefan.<br>
</font><br>--<br>
Ubuntu-motu mailing list<br>
<a href="mailto:Ubuntu-motu@lists.ubuntu.com">Ubuntu-motu@lists.ubuntu.com</a><br>
Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu</a><br>
<br></blockquote></div><br></div>