Project

General

Profile

Bug #331

Updated by tuxillo over 11 years ago

ftpsesame cannot allow ftp active filetransfers. Built it with debug  
 (from wip/ftpsesame) and running: 
 --------------------------------------------------------------------------- 
 # gdb ftpsesame 
 .. 
 (gdb) set args -d -D7 -isk1 
 (gdb) b filter_allow 
 Breakpoint 1 at 0x80493c0: file filter.c, line 104. 
 (gdb) run 
 Starting program:  
 /usr/obj/pkgsrc/wip/ftpsesame/work/ftpsesame-0.95/ftpsesame -d -D7 -isk1 
 listening on sk1, filter 'tcp and port 21', snaplen 500 
 #1 session init: client 160.114.118.95:1875, server 193.6.210.44:21 
 #1 client: USER anonymous 
 #1 server: 331 Please specify the password. 
 #1 client: PASS -wget@ 
 #1 server: 230 Login successful. 
 #1 client: SYST 
 #1 server: 215 UNIX Type: L8 
 #1 client: PWD 
 #1 server: 257 "/" 
 #1 client: TYPE I 
 #1 server: 200 Switching to Binary mode. 
 #1 client: CWD /pub/mirrors/knoppix 
 #1 server: 250-Check KNOPPIX-CHANGELOG.txt for the recent changes in  
 KNOPPIX. 
 #1 client: PORT 160,114,118,95,7,84 
 #1 server: 200 PORT command successful. Consider using PASV. 
 #1 active: PORT 160,114,118,95,7,84 
 #1 allowing 193.6.210.44 to 160.114.118.95 port 1876 

 Breakpoint 1, filter_allow (id=1, src=0x281619e8, src2=0x281270ab,  
 dst=0xbfbff268, d_port=1860) at filter.c:104 
 104       { 
 (gdb) n 
 109               snprintf(an, PF_ANCHOR_NAME_SIZE, "%s/%d.%d",  
 FTPSESAME_ANCHOR, 
 (gdb) n 
 111               strlcpy(pfp.anchor, an, PF_ANCHOR_NAME_SIZE); 
 (gdb) n 
 112               strlcpy(pfr.anchor, an, PF_ANCHOR_NAME_SIZE); 
 (gdb) n 
 113               strlcpy(pfte.anchor, an, PF_ANCHOR_NAME_SIZE); 
 (gdb) n 
 115               if (ioctl(dev, DIOCXBEGIN, &pft) == -1) 
 (gdb) n 
 116                       return (0); 
 (gdb) n 
 115               if (ioctl(dev, DIOCXBEGIN, &pft) == -1) 
 (gdb) n 
 141       } 
 (gdb) n 
 servertalk (s=0x28169000, sbuf=0x281619e8 "200 PORT command successful.  
 Consider using PASV.") at errno.h:52 
 52                return (&errno); 
 (gdb) n 
 51        { 
 (gdb) n 
 #1 filter_allow failed: Invalid argument 
 201       } 
 (gdb) n 
 process_pkt (notused=0x0, h=0xa, p=0x281619c8 "") at ftpsesame.c:438 
 438               s->clientbuf[0] = '\0'; 
 (gdb) n 
 439       } 
 (gdb) n 
 0x2808bf73 in pcap_lookupnet () from /usr/lib/libpcap.so.3 
 (gdb) n 
 Single stepping until exit from function pcap_lookupnet, 
 which has no line number information. 
 #3 client: RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso 
 0x2808ce00 in pcap_dispatch () from /usr/lib/libpcap.so.3 
 --------------------------------------------------------------------------- 

 On the client machine (also DragonFly :-D): 
 --------------------------------------------------------------------------- 
  > wget --no-passive-ftp  
 ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso 
 --23:39:17--  
 ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso 
             => `KNOPPIX_V4.0.2CD-2005-09-23-DE.iso' 
 Resolving xenia.sote.hu... 193.6.210.44 
 Connecting to xenia.sote.hu|193.6.210.44|:21... connected. 
 Logging in as anonymous ... Logged in! 
 ==> SYST ... done.      ==> PWD ... done. 
 ==> TYPE I ... done.    ==> CWD /pub/mirrors/knoppix ... done. 
 ==> PORT ... done.      ==> RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso ... 
 Error in server response, closing control connection. 
 Retrying. 

 --23:40:18--  
 ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso 
    (try: 2) => `KNOPPIX_V4.0.2CD-2005-09-23-DE.iso' 
 Connecting to xenia.sote.hu|193.6.210.44|:21... connected. 
 Logging in as anonymous ... Logged in! 
 ==> SYST ... done.      ==> PWD ... done. 
 ==> TYPE I ... done.    ==> CWD /pub/mirrors/knoppix ... done. 
 ==> PORT ... done.      ==> RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso ... 
 --------------------------------------------------------------------------- 

 We tried to debug with Joerg off-list (cause the list was offline) but  
 it somehow got suspended. I know I am getting on the list members'  
 nerves, but this is the very last thing I need to complete my mission  
 (kinda funny thing: everything that I need does not work :-P).

Back