- main - earth.li

Getting FTP to work through a NAT router - or not
by Chris G 11 Apr '08

11 Apr '08

I have just changed my ADSL router from the Speedtouch 716WL that I have been using for a year or two back to a Zyxel 660H that I had used for a while. The reason is that I no longer need the VOIP ports on the Speedtouch and its firewall is difficult to configure, Web configuration is limited and CLI configuration is arcane! The Zyxel 660H has all the facilities I need now and the Web configuration of the firewall is comprehensive enough for my needs. After a bit of head scratching I have got just about everything working as I want, all the machines on the LAN can see the outside world 'transparently' and some bits of the outside world can see into the LAN as follows:- Any IP address can get to my apache server on port 80 A (very) limited number of IP addresses can connect to my ssh server on port 22 One outside address can get to the router's web configuration which I have moved from the default port 80 to 50080. Very useful for fixing things from work! However I can't get FTP into my NAS to work at all, all I get is a stony silence. I appreciate that there are several oddities about getting FTP to work and it *may* be that it just isn't possible with this router but it would be nice if I could get it to work. What I have done so far is:- Ports 20 and 21 are forwarded from "any outside IP" to the NAS which has the FTP server on it. The firewall allows ports 20 and 21 through. I have disabled the FTP access to the router completely (i.e. as I understand it I have turned the router's FTP server off, it's for Firmware updates etc.) No joy at all. Looking at the router's logs all I see when I try and connect is an incoming packet from the outside system which gets to the NAS and that's it. However I'm not really sure that the logging is showing me everything. By default the FTP clients are using passive mode so, as I see it, everything should be started from the client end. Any ideas anyone as to what I might try next? Even someone saying "it isn't possible" would save me some time! -- Chris Green

8 17

Re: [ALUG] Getting FTP to work through a NAT router - or not
by cl＠isbd.net 10 Apr '08

10 Apr '08

On Thu, Apr 10, 2008 at 02:28:13PM +0100, Dennis Dryden wrote: > Only thing i can think of is that the NAS ftp is broken or not liking > your client. I take it you can connect to the NAS in the same way on > your local network? > Yes, I can ftp to the NAS without problems from within the LAN. -- Chris Green

3 2

John Atkinson RIP (Ancient John)
by John Woodard 08 Apr '08

08 Apr '08

I have some sad news. Those of you who have attended the Syleham Kit Meets might like to know that Ancient John has passed away aged 84. He was the old fellow who always brought his wife's home made biscuits to the meetings and always seemed to be the first one to turn up. A Linux stalwart, he used it to do good things for his deaf/blind grandchildren giving them the ability to read and write. His widow Evelyn told me that he suffered a severe stroke which impaired him totally so he chose to refuse hospital treatment to prolong his sad state. He had his wishes granted so was able to pass away with dignity in his own home with his family around him. She told me he died very happy and asked me to pass this on to all of the Aluggers who have helped him in the past. BJ

5 4

[ALUG Announce] 2nd Thurs Pub Meet 10th April
by Richard Lewis 08 Apr '08

08 Apr '08

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce ----- Dear ALUG, The monthly second Thursday social meeting of ALUG will take place on * Thursday 10th April * at The Reindeer (10 Dereham Road, Norwich, NR2 4AY; tel. 01603 762223). It's very near the junction of Dereham Road and the Norwich inner ring road (Grapes Hill) and serves a selection of real ales, nice pub food (if you fancy going early to eat) and coffee. I intend to be there from about 20:00. Others may be there earlier. We should have a table reserved at the back of the pub just to the left of the bar. We look forward to seeing you there. Cheers, Richard -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Richard Lewis http://www.richard-lewis.me.uk/ JID: ironchicken(a)jabber.earth.li -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- +-------------------------------------------------------+ |Please avoid sending me Word or PowerPoint attachments.| |http://www.gnu.org/philosophy/no-word-attachments.html | +-------------------------------------------------------+ ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce

1 0

[OT?] Finding a spamming virus
by Mark Rogers 07 Apr '08

07 Apr '08

One of our customers has managed to install a virus (Windows, of-course) which is sending spam. My job is to try to track it down. Virus scans haven't found the problem. Although they have MS Exchange on-site, I am sure that the virus will not be sending through it (unless the virus is on the exchange box itself), so in theory it should be fairly easy to find out which PC is initiating lots of outbound SMTP connections. That's why I don't think this is OT - I reckon my best tools for the job will be Linux ones? Either way any suggestions welcomed, particularly ones I can work on via a VPN connection rather than going to site. NB: I've played with programs like Ethereal/Wireshark in the past, and I'm sure that's what I should be looking at, but I've always found myself looking at too much information and unable to see the wood for the trees. So pointers to tutorials gratefully received! -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0845 45 89 555 Registered in England (0456 0902) at 13 Clarke Rd, Milton Keynes, MK1 1LG

8 24

8GB Eee PC
by Ted.Harding＠manchester.ac.uk 06 Apr '08

06 Apr '08

It seems the 8GB Eee PC (with 2GB RAM) is now available, even in the UK: http://eeepc.asus.com/uk/product.htm (Not available in Lush Pink/Sky Blue/Lush Grseen, though. in case you're fussy about such things :)) However, browsing around, I can't seem to find anywhere that has them in stock. PC World only list the 2GB and 4GB models, and Toys R Us are (as always) "out of stock" on any version! Any suggestions? With thanks, Ted. -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding(a)manchester.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 06-Apr-08 Time: 13:17:43 ------------------------------ XFMail ------------------------------

1 0

FW: [man-lug] [Fwd: [Fsuk-manchester] ODF Petition]
by Ted.Harding＠manchester.ac.uk 05 Apr '08

05 Apr '08

Folks: You may be interested in this! Best wishes to all, Ted. -----FW: <47F7B788.9010406(a)army.com>----- Date: Sat, 05 Apr 2008 18:31:52 +0100 Sender: man-lug-admin(a)lists.manchester.ac.uk From: Tim Dobson <personalwebsite(a)army.com> To: man-lug(a)lists.manchester.ac.uk, sheflug(a)sheflug.org.uk, linux-users(a)lists.manchester.ac.uk Subject: [man-lug] [Fwd: [Fsuk-manchester] ODF Petition] -------- Original Message -------- Subject: [Fsuk-manchester] ODF Petition Date: Sat, 05 Apr 2008 17:32:00 +0100 From: Mac <Ammonius.Grammaticus(a)googlemail.com> To: fsuk-manchester(a)nongnu.org You may already know of the petition for the National Archive to use ODF and not M$ OOXML as planned. If not, here's the URL: http://petitions.pm.gov.uk/ODFinNA/ Mac _______________________________________________ Fsuk-manchester mailing list Fsuk-manchester(a)nongnu.org http://lists.nongnu.org/mailman/listinfo/fsuk-manchester -- www.tdobson.net ---- If each of us have one object, and we exchange them, then each of us still has one object. If each of us have one idea, and we exchange them, then each of us now has two ideas. - George Bernard Shaw ---------------------------------------------- http://lists.manchester.ac.uk/mailman/listinfo/man-lug ManLUG WWW Pages: http://www.manlug.mcc.ac.uk/ --------------End of forwarded message------------------------- -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding(a)manchester.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 05-Apr-08 Time: 19:12:37 ------------------------------ XFMail ------------------------------

1 0

How to use tee to pipe stdin to two scripts?
by Chris G 02 Apr '08

02 Apr '08

I want to send standard input to two places, both of which are shell (well, actually python and perl) scripts. I assume I need to use tee but it's not obvious how to do it. My actual requirement is for .forward to send incoming mail messages to an (old) perl script and a (new, replacement) python script while I write and debug the new python script. The existing .forward file is:- | /home/isbd/bin/filter.pl How do I change this so it sends its standard input to both /home/isbd/bin/filter.pl *and* /home/isbd/bin/filter.py? -- Chris Green

4 4

HTML Mail / Asus EEE PC for £186.70 at Marshall Wards
by Martin Collins 01 Apr '08

01 Apr '08

Guilty. But I was unaware that I was doing it as I was using the web interface of GMail rather than KMail as I've temporarily lost access to my laptop. It's not glaringly obvious how to send plain text via the GMail web interface but when composing a message, there's a line just above the message-text entry box that has Bold and Italic and Underline symbols...on the end is a blue link that says << Plain text - Doh! I suppose the Bold, Italic and Underline symbols should have told me something!! Guilty, guilty, guilty. The original message was this but unsure now whether it's still active. Hi, thought some of you might be interested in this. Got this info from http://www.hotukdeals.com/item/163077/asus-eee-pc-4gb-blk-or-white-186-70/ If you goto Marshall Wards site and (register) order an 4GB Black or White Asus EEE PC and enter the code XX214 you'll get 20% off, bringing the price down to £186.70. In stock delivery in 7 days. A Linux bargain! Rgds, Martin

3 2

blocking net but not lan on one pc
by Peter Alcibiades 30 Mar '08

30 Mar '08

Thanks guys for all the helpful suggestions. The easiest and most manageable for the people who have the system is probably to just do fixed IP address for this particular station and to not have a default route. I should have thought of that myself. I guess you could do the same thing and just not have DNS server defined, which would be good enough in this environment. Then if they want to turn it back on again, they just go back to DHCP, which is a one click change and easy to explain. The router is a netgear wired 5 port router/modem, but it doesn't seem to have blocking of access by MAC address. Yes, that would otherwise have been almost as simple. There are only three machines in this little network, the only real reason they are on a network is to print, and the one in question is in a public part of the building. Tts not accessible by the public, but whatever is on screen is visible to visitors, its a reception desk machine with displays that vary in response to what the staff do, and that the visitors do need to see. I'm not quite sure why they don't want it to have outside access, its more at the level of a general feeling than anything else. But its their decision. Of the other two machines, one is not on public view and is only used by a couple of specialists, and they are not bothered about it, the other does all the office admin, email and so on, and that one they obviously need to have full access. But it is in an office and so not available to all the staff, and not visible to the public. Thanks again! Peter

1 0