Bug #331
Updated by tuxillo over 11 years ago
ftpsesame cannot allow ftp active filetransfers. Built it with debug
(from wip/ftpsesame) and running:
---------------------------------------------------------------------------
# gdb ftpsesame
..
(gdb) set args -d -D7 -isk1
(gdb) b filter_allow
Breakpoint 1 at 0x80493c0: file filter.c, line 104.
(gdb) run
Starting program:
/usr/obj/pkgsrc/wip/ftpsesame/work/ftpsesame-0.95/ftpsesame -d -D7 -isk1
listening on sk1, filter 'tcp and port 21', snaplen 500
#1 session init: client 160.114.118.95:1875, server 193.6.210.44:21
#1 client: USER anonymous
#1 server: 331 Please specify the password.
#1 client: PASS -wget@
#1 server: 230 Login successful.
#1 client: SYST
#1 server: 215 UNIX Type: L8
#1 client: PWD
#1 server: 257 "/"
#1 client: TYPE I
#1 server: 200 Switching to Binary mode.
#1 client: CWD /pub/mirrors/knoppix
#1 server: 250-Check KNOPPIX-CHANGELOG.txt for the recent changes in
KNOPPIX.
#1 client: PORT 160,114,118,95,7,84
#1 server: 200 PORT command successful. Consider using PASV.
#1 active: PORT 160,114,118,95,7,84
#1 allowing 193.6.210.44 to 160.114.118.95 port 1876
Breakpoint 1, filter_allow (id=1, src=0x281619e8, src2=0x281270ab,
dst=0xbfbff268, d_port=1860) at filter.c:104
104 {
(gdb) n
109 snprintf(an, PF_ANCHOR_NAME_SIZE, "%s/%d.%d",
FTPSESAME_ANCHOR,
(gdb) n
111 strlcpy(pfp.anchor, an, PF_ANCHOR_NAME_SIZE);
(gdb) n
112 strlcpy(pfr.anchor, an, PF_ANCHOR_NAME_SIZE);
(gdb) n
113 strlcpy(pfte.anchor, an, PF_ANCHOR_NAME_SIZE);
(gdb) n
115 if (ioctl(dev, DIOCXBEGIN, &pft) == -1)
(gdb) n
116 return (0);
(gdb) n
115 if (ioctl(dev, DIOCXBEGIN, &pft) == -1)
(gdb) n
141 }
(gdb) n
servertalk (s=0x28169000, sbuf=0x281619e8 "200 PORT command successful.
Consider using PASV.") at errno.h:52
52 return (&errno);
(gdb) n
51 {
(gdb) n
#1 filter_allow failed: Invalid argument
201 }
(gdb) n
process_pkt (notused=0x0, h=0xa, p=0x281619c8 "") at ftpsesame.c:438
438 s->clientbuf[0] = '\0';
(gdb) n
439 }
(gdb) n
0x2808bf73 in pcap_lookupnet () from /usr/lib/libpcap.so.3
(gdb) n
Single stepping until exit from function pcap_lookupnet,
which has no line number information.
#3 client: RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso
0x2808ce00 in pcap_dispatch () from /usr/lib/libpcap.so.3
---------------------------------------------------------------------------
On the client machine (also DragonFly :-D):
---------------------------------------------------------------------------
> wget --no-passive-ftp
ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso
--23:39:17--
ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso
=> `KNOPPIX_V4.0.2CD-2005-09-23-DE.iso'
Resolving xenia.sote.hu... 193.6.210.44
Connecting to xenia.sote.hu|193.6.210.44|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/mirrors/knoppix ... done.
==> PORT ... done. ==> RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso ...
Error in server response, closing control connection.
Retrying.
--23:40:18--
ftp://xenia.sote.hu/pub/mirrors/knoppix/KNOPPIX_V4.0.2CD-2005-09-23-DE.iso
(try: 2) => `KNOPPIX_V4.0.2CD-2005-09-23-DE.iso'
Connecting to xenia.sote.hu|193.6.210.44|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/mirrors/knoppix ... done.
==> PORT ... done. ==> RETR KNOPPIX_V4.0.2CD-2005-09-23-DE.iso ...
---------------------------------------------------------------------------
We tried to debug with Joerg off-list (cause the list was offline) but
it somehow got suspended. I know I am getting on the list members'
nerves, but this is the very last thing I need to complete my mission
(kinda funny thing: everything that I need does not work :-P).